# LiveKit: Expired TURN TLS Certificate

> LiveKit status incident “Expired TURN TLS Certificate” on 2023-10-20: impact minor (vendor’s label), 0 min, 1 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/livekit/incidents/2n0jd2nqhw20
Last updated: 2023-10-20T00:00:00Z

- Impact (vendor’s label): minor
- Status: resolved
- Started: 2023-10-20 00:00 UTC · Resolved: 2023-10-20 00:00 UTC · Duration: 0 min
- Updates: 1
- [Vendor status page: https://status.livekit.io/incidents/2n0jd2nqhw20](https://status.livekit.io/incidents/2n0jd2nqhw20)
- [Company: LiveKit](https://rewindex.com/company/livekit.md)

## Timeline of updates

- **resolved** 2023-10-20 00:00 UTC: At exactly 00:00 UTC, our wildcard TURN TLS certificate expired, which lead to certain network-restricted clients being unable to connect to our RTC backend. Even though we anticipated the certificate expiring and already had a new certificate available, the certificate had not been applied to our fleet. While we do have monitoring in place for our TURN TLS service, due to a limitation of our monitoring software, we were not monitoring the TLS certificate. We were made aware of a connectivity issue after receiving a customer report at 00:09 UTC. We were able to deduce the root cause of the issue by 00:40 UTC, and we quickly reconfigured our TURN TLS servers with the updated TLS certificate. RTC connectivity via TURN TLS was restored at 00:48 UTC. Going forward, we will implement a process to ensure accountability in manual configuration changes, such as updating our TURN TLS certificate. We also have a plan to automate this process in the future, and implement additional monitoring. Note that TURN UDP was unaffected throughout this outage.

_From the vendor’s published history: only the final update text is available for incidents before Rewindex began polling this page._

## Cite this

Status incident (vendor impact label: minor) posted by LiveKit, started 2023-10-20 00:00 UTC, resolved after 0 min, 1 update(s).

- Canonical URL: https://rewindex.com/company/livekit/incidents/2n0jd2nqhw20
- Citation: LiveKit, “Expired TURN TLS Certificate” (2023-10-20 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/livekit/incidents/2n0jd2nqhw20 (CC BY 4.0).
- Markdown link: `[LiveKit: Expired TURN TLS Certificate (2023-10-20)](https://rewindex.com/company/livekit/incidents/2n0jd2nqhw20)`


---
Canonical: https://rewindex.com/company/livekit/incidents/2n0jd2nqhw20 · Markdown: https://rewindex.com/company/livekit/incidents/2n0jd2nqhw20.md · JSON: https://rewindex.com/api/v1/companies/livekit/incidents/2n0jd2nqhw20 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T15:17:25.618Z
