Univention Bugzilla – Bug 45333
Check if master and backup use correct SSL certificate
Last modified: 2020-07-03 20:54:10 CEST
Most UMC modules that contact the UCS master via UMCP rely on the fact, that the master uses a SSL certificate that contains the local FQDN (e.g. master.mycorp.intra). In some scenarios the SSL certificate of the apache is replaced by a custom SSL certificate (e.g. let's encrypt) that contains only the public FQDN of the UCS master (e.g. www.mycorp.com). The diagnosis module should check if the master (and/or dc backups) is accessible via HTTPS and uses a certificate that also provides the local FQDN at least as alternativeName.
This issue has been filed against UCS 4.2. UCS 4.2 is out of maintenance and many UCS components have changed in later releases. Thus, this issue is now being closed. If this issue still occurs in newer UCS versions, please use "Clone this bug" or reopen it and update the UCS version. In this case please provide detailed information on how this issue is affecting you.