LDAP identifier backend logon connect error: LDAP Result Code 200 "Network Error": tls: failed to verify certificate: x509: certificate has expired or is not yet valid

If you see this error:

{“level”:“error”,“service”:“idp”,“error”:“ldap identifier backend logon connect error: LDAP Result Code 200 "Network Error": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2025-07-07T20:09:00+08:00 is after 2025-07-06T14:39:36Z”,“time”:“2025-07-07T20:09:00+08:00”,“message”:“identifier failed to logon with backend”}

and you are not able to logon. if you installation is behing proxy, usually you will also get error:

Unexpected HTTP response: 500. Please check your connection and try again.

This normally cause by expired certificate which resides under ocis/idm folder. There you can find two certs which is ldap.key or ldap.cert. this files has expired. If your installation is using built in IDM / LDAP, you can just delete this files and when you restart the service it will regenerate back these two files.