Yeah this just bit me, unless I cat’d the fullchain of a letsencrypt cert into the cert file itself I was left with dex erroring on the generic:
http: TLS handshake error from <ip address>:58758: local error: tls: bad record MAC
Is this an upstream Dex issue?