I’m not sure if it is the best way to do it, but here is how I solved the problem.
- Backup kopano ssl config
cp -a /etc/kopano/ssl /etc/kopano/"ssl_$(date +%Y%m%d)"
- Copy univention SSLs of master to kopano directory
cp /etc/univention/ssl/[YOUR_FQHN]/* /etc/kopano/ssl/
- create
server.pem
cd /etc/kopano/ssl/
cat private.key > server.pem
cat cert.pem >> server.pem
- change owner
cd /etc/kopano/ssl/
chown kopano:kopano *
- Restart kopano-server and check status
systemctl restart kopano-server
systemctl status kopano-server
First (before the update), I had to re-create all SSL certificates:
eval "$(ucr shell domainname ssl/default/days)"
cd /etc/univention/ssl
for i in *".${domainname}"; do univention-certificate new -name "$i" -days "${ssl_default_days}"; done
And then follow all other steps of Renewing the SSL certificates (but use univention-certificate new instead of univention-certificate new as shown above)