renew_all_certs () {

	local CYRUSBASE="/var/lib/cyrus"

	local ADBASE="/var/www/univention-ad-connector"

	local RADIUSBASE="/etc/freeradius/ssl"

	eval "$(ucr shell domainname ssl/default/days)"

	cp -a "$SSLBASE" "${SSLBASE}_$(date +%d%m%Y)"

	openssl x509 -in "$SSLBASE/$CA/CAcert.pem" -out "$SSLBASE/$CA/NewCAcert.pem" \

		-days "$ssl_default_days" -passin "file:$SSLBASE/password" \

		-signkey "$SSLBASE/$CA/private/CAkey.pem"

	mv "$SSLBASE/$CA/NewCAcert.pem" "$SSLBASE/$CA/CAcert.pem"

	cd "$SSLBASE"

	for fqdn in *."$domainname"; do

		renew_cert "$fqdn" "$ssl_default_days"

	done

	cp "$SSLBASE/$CA/CAcert.pem" /var/www/ucs-root-ca.crt

	/usr/sbin/univention-certificate-check-validity

	if [ -d "$CYRUSBASE" ]; then

		cp "$SSLBASE/$(hostname -f)/cert.pem" "$CYRUSBASE"

		cp "$SSLBASE/$(hostname -f)/private.key" "$CYRUSBASE"

		chown cyrus:mail "$CYRUSBASE/cert.pem"

		chown cyrus:mail "$CYRUSBASE/private.key"

	fi

	if [ -d "$ADBASE" ]; then

		cp "$SSLBASE/$(hostname -f)/cert.pem" "$ADBASE"

		cp "$SSLBASE/$(hostname -f)/private.key" "$ADBASE"

		chgrp www-data "$ADBASE/cert.pem"

		chgrp www-data "$ADBASE/private.key"

	fi

	if [ -d "$RADIUSBASE" ]; then

		cp "$SSLBASE/$(hostname -f)/cert.pem" "$RADIUSBASE"

		cp "$SSLBASE$(hostname -f)/private.key" "$RADIUSBASE"

		chown root:freerad "$RADIUSBASE/cert.pem"

		chown root:freerad "$RADIUSBASE/private.key"

	fi

}

	echo "        renew-all"

	renew-all) command="$1" name="DUMMY" ;;

renew-all () {

		run_only master exclusive

		echo "Renew all certificates"

		renew_all_certs

}