I noticed that UCS creates certificates automatically for newly created IP Client devices. However, I have renamed some of these devices and notice that the associated certificates are neither revoked, deleted, nor renamed. I have three such certificates.
Firstly, I’d prefer to delete the certificates relating to the old names, rather than just revoke them, since the certificates were never actually used. This is preferable because I have a cron script to renew my certificates automatically, and it is a pain to distinguish between certificates in /etc/univention/ssl that have been revoked and that should never be renewed, and those that I do need to renew.
However, there doesn’t appear to be any commands for deleting certificates. I’m guessing I could just remove the `/etc/univention/ssl/’ directory (and associated symbolic links), but it appears that those certificates are referenced by UCS’s certificate management system.
I’m also unsure how to create certificates for the renamed devices. Can I just create them using univention-certificate new (which doesn’t create the symbolic links using the hostname, indicentally)? Is there some way to associate the certificates with the IP Client devices, or is that not necessary?
Thanks for your assistance!