Question on SSL Certificate

[Sushma]

Hi All

In most of the AD connections we are using SSl certificates. But as we see they are already expired but still connection is working.

Can you explain is this expected behavior/How does it work as document says a connection with an expired certificate will not work. 

Thank you in Advance!

[rushikeshvartak]

• Does certificate initially added from UI or from server in keystore ?

[smithamg]

Hi @rushikeshvartak @Sushma ,

We are also observing the same behavior in our lower environment.

AD SSL certificate in test env is expired in NOV 2023 and AD connection is still successful and provisioning/ import is working without any issue.

Certificate is uploaded from UI.

Can you explain how this works?

Thanks,
Smitha

[rushikeshvartak]

• Can you share certificate expiry screenshot? 
• Please check AD Certificate validity on server level expiry on UI is coming from DB but Expiry actuals needs to be checked in keystore. You need to take help of support team - devops 

[dgandhi]

In your connection, are you connecting to SSL port of Active Directory or non ssl port (389)

[smithamg]

@rushikeshvartak 

Please find the screenshots below. I checked the expiry date in AD server and its same and expired

@dgandhi we are connecting via SSL port 636

Thanks,
Smitha

[rushikeshvartak]

Please check ssl expiry from keystore with help of support ticket, which matters