Hi,
i renewed all Certifictes incl. SAML, but System diagnosis still shows one warning for 01.pem. This was renewed now by 50.pem.
How to get rid of this Warning?
Zertifikat ‘/etc/univention/ssl/ucsCA/certs/01.pem’ wird in 40 Tagen ablaufen. Siehe Univention Support Database - Erneuern der TLS/SSL-Zertifikate für Informationen zum Erneuern von Zertifikaten.
Hi neobiker,
do you resolved your problem?
Today I’ve renewed all certificates to, like it is described from @Muehlenhoff in http://sdb.univention.de/1000. In the old howto-article (Erneuern der kompletten SSL-Zertifikatskette) the ssl-folder was moved. In the actually article (Erneuern UCS SSL Zertifikate: Bitte um aktualisieren der Dokumentation) it was only copied, so all old certs are still in the system.
Now I have to certificates, that will expire
Zertifikat '/etc/univention/ssl/ucsCA/certs/01.pem' wird in 19 Tagen ablaufen.
Zertifikat '/etc/univention/ssl/ucsCA/certs/02.pem' wird in 19 Tagen ablaufen.
Do you revoked the certificates?
Thanks
Ulf
I think i just waited 
Hi Ulf,
i think, these two vertificates belong to computers that you created once,
but which are no longer available in your environment.
As @neobiker said, just wait.
I think one day after the expiration date, these entries will disappear.
hth,
Oliver Bertgen