@bforpc Sorry for the late reply: We are working on it since last year. Current status is that in most scenarios the update is working fine, but not in all kinds of deployment. Univention has to fix some dependencies in order to get this working, we are currently waiting for this, and afterwards we can test these chances again and hopefully release the new version.
AFAIK there is no fully automated way, email/calendar/contact migrations are always quite labor-intensive. But with a couple of VMs and a multi-monitor-setup you can do this in parallel from one PC… Quite doable.
And lookup postfix letsencrypt guides, there are so many out there… I suggest as a building block to start with initial self-signed certs, once you have smtps auth working proper, then move your way up with letsencrypt.
Valid SSL cert is an important part, especially for Outlook.
@ckruijntjens Thanks alot for your appreciation! And thanks alot for your offer as well, but accepting donations as a company is quite a hazzle regarding tax, balance sheets, no proper paperwork to provide information about where this came from, and where it goes to.
And yes, we will continue with the community edition.
add_header Content-Security-Policy-Report-Only “default-src ‘self’; font-src ‘self’; img-src ‘self’; script-src ‘self’ ; style-src ‘self’”;
and start the development tools of your browser.
in my Case i got 3 messages like this here:
so I modified my policy with these 3 sha256 hashes:
Of course first with the add_header Content-Security-Policy-Report-Only and after there were no reports I activated my policy.
Now the https://observatory.mozilla.org reports an A+
BUT I did not perform a login…so switch back to report only and perform a login - there you will get a few more hashes ;)