Update UCS 4.4.9 to 5.0.2 fails because of SHA1

UCS - Univention Corporate Server
#1

I would like to update my server, but I get the message my cert.pem for my server itself is SHA1 encrypted, which ist not longer supported. So I’ve done anything in https://help.univention.com/t/renewing-the-ssl-certificates/37, but the encryption of my cert.pem stay SHA1 (correct: sha1WithRSAEncryption).
I would like to have cleaned all warnings prior to the update. How can I achive this?

Thanks

Thomas

#2

Okay, found by myself. There is an UCR-Variable ssl/default/hashfunction which was on SHA1. Changin to SHA256 solved this problem

Mastodon