"The certificate expired" error when synchronizing with LDAP server

  • 7023759
  • 07-Mar-2019
  • 07-Mar-2019

Environment

Filr 3.0 Appliance

Situation

Attempting to sync with the LDAP server in the port 8443 Administration Console results in an error such as:

LDAP Server: ldaps://myserver
com.ibm.jsse2.util.h: PKIX path validation failed: java.security.cert.CertPathValidatorException: The certificate expired at Sat Mar 02 17:33:21 GMT 2019; internal cause is: java.security.cert.CertificateExpiredException: NotAfter: Sat Mar 02 17:33:21 GMT 2019

Resolution

For an OES server, follow TID 7000075 to update the SSL certificate on the LDAP server. For an AD server, consult the Microsoft documentation.

Cause

The SSL certificate residing on the LDAP server has expired.

Additional Information

See also: LDAP Synchronization Security in the Filr documentation.