Unifi keystore

 


https://gist.github.com/hdml/8a446dc1b0ad4f94b7a17a67a33286ab


##Installing a custom SSL cert on Unifi Controller


Requirements:


Domain certificate (.crt)

Certificate key (.key)

Intermediate certificate from CA (*.crt, *.pem)

Permissions to restart the unifi service

Debian or Ubuntu Unifi Controller installation

###Backup your current keystore


cd /var/lib/unifi

sudo cp keystore keystore.bkp

###Create pkcs12 certificate


openssl pkcs12 -export -in domain_certificate.crt -inkey domain_certificate_priv.key -out domain_certificate.p12 -name unifi -CAfile "intermediate_cert_from_CA.crt" -caname root -password pass:aircontrolenterprise


Copy your new cert to /etc/ssl/private


sudo cp domain_certificate.p12 /etc/ssl/private


###Replace certificate in keystore with newly created cert


sudo keytool -importkeystore -deststorepass aircontrolenterprise -destkeypass aircontrolenterprise -destkeystore /usr/lib/unifi/data/keystore -srckeystore /etc/ssl/private/domain_certificate.p12 -srcstoretype PKCS12 -srcstorepass aircontrolenterprise -alias unifi

When prompted to replace the current certificate, say yes.


###Restart the Unifi Controller service


sudo reboot

Popular posts from this blog

Mikrotik v.7 Using cell lock on LHG LTE18

Image
  There  is  a way to do a cell lock on EG18-EA modem, it worked for me on LHG LTE18 kit. All information below is taken from  this thread on the Quectel forum . You will need to figure out PHY-CELLID (ID of the cell itself) and EARFCN (frequency that will be locked as primary band). You can get a list of cells around you and corresponding frequencies using cell monitor via web UI or console with: Code:  Select all interface / lte / cell - monitor lte1 You will get something like this: Code:  Select all PHY - CELLID BAND EARFCN RSRP RSRQ RSSI AGE 247 B7 2850 - 99dBm - 9dB - 68dBm 1s 99 B7 2850 - 104dBm - 15dB - 79dBm 1s 258 B7 2850 - 107dBm - 16dB - 83dBm 1s 69 B7 2850 - 111dBm - 20dB - 79dBm 1s 362 B7 2850 - 115dBm - 20dB - 85dBm 1s Next, use the following command to  set a cell lock : Code:  Select all interface /...
Read more

Zabbix Proxy RAM config

Image
Zabbix Proxy RAM config Content is copyed from  ZNIL.NET 2.1  Install Raspbian You download NOOBS: 5  Configure the Zabbix proxy We open the configuration file nano /etc/zabbix/zabbix_proxy.conf and adjust at least the following lines: Server = IP or DNS name of the Zabbix server to be reported to # Hostname -> under this name we also have to create the proxy on the main server! Hostname = zabbixproxy # Increase command timeout. This is how long the proxy waits for replies from scripts, checks and agents Timeout = 30 # New 3.4 feature - RemoteCommands now also work behind proxies EnableRemoteCommands = 1 LogRemoteCommands = 1 # Database and log in the RAM disk (do not change the lines if not desired) LogFile = / var / ramdisk / zabbix_proxy.log LogFileSize = 4 DBName = / var / ramdisk / zabbixproxy.db https://www.raspberrypi.org/downloads/noobs/ I recommend the normal variant, not the Lite - especially if you are on the go in company networks.  Noobs ...
Read more