We use lets encrypt certs and put it on our ldap server. A few days ago the cert got rolled over but the ldap server didn’t get HUPped so it was still using the old one.
Concourse web continued to work for a few days, so I guess it caches usernames/passwords? Then this morning it stopped working and we couldn’t login.
There was nothing sent to the log to suggest a cert validation error saying “bad ssl cert on ldap server” or something.
But well done that it doesn’t accept expired certificates; we have other things that have continued to work despite bad ldap server ssl cert!