session with expired certificate

[Hallvard B Furuseth <h.b.furuseth@usit.uio.no>]

The thread about the bindDN being deleted reminded me of something:

What happens if the client or server certificate expires during the
session?  Should the session revert to 'unknown' auth state, as was
suggested in the bindDN thread?  Should the server or client (depending
on which certificate expired) close the TLS session, if any?

BTW, is this the same as if the bindDN names a strongAuthenticationUser
and binds with its certificate, or is that a third case?

-- 
Hallvard