Changes:
- generate-csr.sh: Auto-detects target IP via SSH or DNS
- sign-cert.sh: Preserves SAN extensions including IP addresses
- Uses UCS CA password file for automated signing
- Fixes IP Address: -> IP: format conversion for OpenSSL compatibility
Benefits:
✅ Access services via https://10.0.0.50:8006 without warnings
✅ Access via https://hostname:8006 also works
✅ Single certificate for all access methods
✅ Browser shows secure connection for both methods
Technical details:
- Extracts SAN from CSR and applies via -extfile
- Uses 'openssl x509 -req' with -passin file:/etc/univention/ssl/password
- Preserves all DNS names and IP addresses in signed certificate
