Renewed all SSL Certificates, Warning shows still one entry

UCS - Univention Corporate Server
1

Hi,
i renewed all Certifictes incl. SAML, but System diagnosis still shows one warning for 01.pem. This was renewed now by 50.pem.

How to get rid of this Warning?

Zertifikat ‘/etc/univention/ssl/ucsCA/certs/01.pem’ wird in 40 Tagen ablaufen. Siehe Univention Support Database - Erneuern der TLS/SSL-Zertifikate für Informationen zum Erneuern von Zertifikaten.

2

Hi neobiker,

do you resolved your problem?

Today I’ve renewed all certificates to, like it is described from @Muehlenhoff in http://sdb.univention.de/1000. In the old howto-article (Erneuern der kompletten SSL-Zertifikatskette) the ssl-folder was moved. In the actually article (Erneuern UCS SSL Zertifikate: Bitte um aktualisieren der Dokumentation) it was only copied, so all old certs are still in the system.

Now I have to certificates, that will expire

  • unassigned-hostname.unassigned-domain
  • {myUcsMaster}.$domainname
Zertifikat '/etc/univention/ssl/ucsCA/certs/01.pem' wird in 19 Tagen ablaufen.
Zertifikat '/etc/univention/ssl/ucsCA/certs/02.pem' wird in 19 Tagen ablaufen.

Do you revoked the certificates?

Thanks
Ulf

3

I think i just waited :slight_smile:

4

Hi Ulf,

i think, these two vertificates belong to computers that you created once,
but which are no longer available in your environment.

As @neobiker said, just wait.

I think one day after the expiration date, these entries will disappear.

hth,

Oliver Bertgen