macOS app keeps trying to connect with expired certificate

[ghost]

As reported, it appears the macOS client keeps trying to connect to the VPN server after the certificate expired. This is not necessary as it will never work.

Possibly related #494, #502

[FredHasselman]

I have the same problem. On macOS, after expiration all network traffic is halted because the client keeps trying to connect. This affects many processes most prominently syncing and backup. The client should terminate and allow traffic as usual!

[FredHasselman]

This problem still persists, I added a description of behavior after pressing "Renew Session":

• After expiration of the certificate, the macOS client BLOCKS ALL INTERNET ACCESS and keeps trying to connect.
• This means that any planned system updates, syncing activity (iCloud, surfnet, dropbox) and remote server connections will be interrupted when unnoticed by the user. The notification can easily be missed when the expiration time (and the warning) occur in the night or weekend.
• The internet access is immediately restored after pressing the "Renew Session" button, but before the app is authorized again by logging into the institution's web portal. The re-authorization is not announced in the app itself (e.g. as a repsone to pressing the r"Renew Session" button). It is easily missed, the web-page often opens in the background because other apps that now have regained internet access start sending notifications.
• An expiration notification is NOT a proper solution! The app should securely close down the VPN connection and release internet access back to the OS.

[jwijenbergh]

• After expiration of the certificate, the macOS client BLOCKS ALL INTERNET ACCESS and keeps trying to connect

In my experience this is not exactly the case. When the app shows "Connecting...", non-DNS traffic (e.g. ping 1.1) will go outside of the VPN. However, when it is in Connected with expired, indeed everything is blocked