SASL Out Of Service After USC CA extend and Renew Certificates

[Jordan67]

Hello everyone

I have two UCS hosts (dc-1 and dc-2) running version 5.0-6 errata959.

For a few days I have had the following message displayed: The SSL host certificate will expire in 19 days and should be renewed!

So I checked the date of my CA which will soon expire.

root@dc-1:/etc/univention/ssl/ucsCA# openssl x509 -in CAcert.pem -noout -enddate -serial
notAfter=Mar 18 11:46:15 2024 GMT
serial=F78E541C05CAFBDD

I therefore followed the instructions on this page because I wish, as far as possible, not to renew my CA :

How-to: Extend the end date of the UCS CA root certificate

How-to: Extend the end date of the UCS CA root certificate The root certificate of the UCS Certificate Authority (CA) is created during the installation of the UCS Master and by default valid for 5 years. The regular process is to renew the complete certificate chain, before the root certificate reaches its end date. In this case, all old certificates become invalid. Another possibility is to renew the root certificate, but keep the existing private key. In this case, the new root certificate w…

I follow this procedure to the end, then I go to this page to renew my hosts’ certificates :

Renewing the SSL certificates

Communication between the different systems in a UCS domain is largely SSL encrypted. A root certificate and host certificate for each computer are required for the SSL encryption. The root certificate is only valid for a specified period of time, as are the host certificates created with the root certificate. Once this period of time elapses, services which encrypt their communication with SSL (e.g., LDAP) no longer function. It is thus essential to verify the validity of the certificates and c…

Renewing all computer certificates

This has at least to be done on the master.

eval "$(ucr shell domainname ssl/default/days)"
cd  /etc/univention/ssl
for i in *".${domainname}"
do
  univention-certificate renew -name "$i" -days "${ssl_default_days}"
done 

After following the instructions given above I have an error with the SASL service see image below

How to fix this error?
Thank you so much