Never Let Your SSL Expire Again, Convert Alerts to Dismissible Toasts - This week in Orchard (10/07/2026)
Does your admin UI tell you when an SSL certificate is about to expire?
Does your deployment pipeline carry Security settings between environments, or does someone have to reconfigure them by hand?
After this week's post, the answer to both is yes!
This issue covers: SSL Check (color-coded expiration warnings on the Tenants page), Security settings import/export via deployment plans, and notification alerts converted to dismissible toasts.
Plus an interview with Antoine Griffard, one of Orchard's longest-running contributors!
Orchard Core updates
Add import/export support for OrchardCore.Security settings
OrchardCore.Security lacked the ability to import/export its settings: no IRecipeStepHandler implementation (making even hand-crafted recipes impossible) and no IDeploymentSource. Kenneth Okalang fixed this by adding a SecurityDeploymentStartup that registers a site settings property deployment step for SecuritySettings via AddSiteSettingsPropertyDeploymentStep. Both import and export (via recipe steps and deployment plans) are now available through the standard UI.
In the admin UI, navigate to Settings -> Security -> Security Headers to configure the content security policy, permissions policy, and referrer policy.
To export, go to Tools -> Deployments -> Plans, create a new deployment plan, and add the Security settings step. Execute the plan and download the result. Unzipping the archive reveals a Recipe.json with the settings for all three Security Headers tabs.
Convert Alerts to Dismissible Toasts
Notification messages generated by INotifier will now display as toast alerts. By default, only Success notifications are automatically dismissed after 5 seconds, while Error, Warning, and Information notifications remain visible until manually dismissed.
Developers can customize the dismissal timeout or disable automatic dismissal entirely. All notification types can also be manually closed by users using the X button.
This improves the user experience by preventing transient success messages from permanently occupying screen space, while ensuring more important notifications remain visible without affecting the layout or positioning of HTML components such as buttons.
Mike Alhayek also updated the docs of the Notifications module with code examples about how to send a notification, or how to customize the toast messages by overriding the Message and the NotifyMessages shapes.
Demos
Never Let Your SSL Expire Again - SSL Check Feature
Hisham Bin Ateya created SSL Check, a new feature that will be part of the Orchard Core Security module. Enable it under Tools -> Features. Once active, the Multi-Tenancy -> Tenants page shows a colored SSL badge next to each tenant domain indicating certificate expiration status.
The thresholds are configurable under Configuration -> Security -> SSL Checker. Tenants within the warning threshold get a yellow badge; those within the critical threshold get a red badge.
The feature also integrates with the Admin Dashboard: enable the Admin Dashboard feature, and a widget appears on the admin home page summarizing all domains and their expiration dates.
And it's still not all of it! A recording is available on YouTube!
News from the community
Sponsorship Spotlight: Antoine Griffard
Antoine Griffard has been contributing to Orchard since its earliest days (more than 15 years). In our new Sponsorship Spotlight series, he talks about what keeps him going: "If you give some time and effort to contributing, everything you did will be yours forever."
Read the full interview to hear his story, from his first MVP Summit to the upcoming Orchard Harvest conference in Vancouver this September.
Orchard Harvest 2026 Program
The Orchard Harvest 2026 conference will be held in Vancouver, and we look forward to seeing you all this autumn in Canada. Our confirmed dates for this year are September 10th and 11th.
Don't miss this limited-time offer: just $280 for two days of all-access learning and networking. Secure your early-bird tickets to the conference now!
The full Orchard Harvest 2026 program is live! Be sure to check out the conference's updated official website for the program!
As we move forward, we will keep community members informed of the details, and you will find every detail in this newsletter, too!
Don't miss the biggest Orchard Core event of the year!
Orchard Dojo Newsletter
Lombiq's Orchard Dojo Newsletter has 414 subscribers! We have started this newsletter to keep the Orchard community informed about the latest platform news. By subscribing to this newsletter, you will receive an email whenever a new post is published to Orchard Dojo, including 'This Week in Orchard', of course.
Do you know of other Orchard enthusiasts who would like to read our weekly articles? Tell them to subscribe here!