Hey, I'm providing a custom SSL certificate to Unraid and update it with a shellscript.

Still, I need to click the "Provision" button under "Settings -> Management Access" manually:

 

 

How can I invoke the functionality of that button from my shellscript that's running on the server?

You don't need to, there's already an autoupdate function built-in.

 

Quote

After an Unraid.net SSL Certificate has been installed, two background services are activated while the server is signed in to unraid.net:

updatedns - This starts 30 seconds after server reboot has completed and contacts the Lime Technology DNS service to register the servers local IP address. Thereafter it wakes up every 10 minutes in case the local IP address has changed.

renewcert - This starts 60 seconds after server reboot has completed and contacts the Lime Technology certificate renewal service to determine if your Unraid.net SSL certificate needs to be renewed. Thereafter it wakes up every 24 hours. If within 30 days of expiration, a new certificate is automatically provisioned and downloaded to your server.

 

 

This is the path it shows in the settings UI. I just replace that file with my custom certificate (it has nothing todo with Unraid.net or whatever server they offer), but nothing happens.

Unraid only picks it up when I press "Provision".

 

So I assume that I need to press that button. If there's a better way, please tell me

Anything Unraid stores in /boot/config is only loaded at boot time, then resides in RAM so it's normal that it doesn't get picked up.

 

It's not clear what the purpose is but it seems you should probably be using a reverse proxy container rather than hijacking this feature.

Edited July 26, 20223 yr by Kilrah

@Kilrah I am not hijacking anything, it's even officially documented here: https://wiki.unraid.net/Manual/Security#Custom_Certificates

The "Provision" button will provision a myunraid.net certificate. There is no need to press it if you are providing your own custom certificate.

 

You can provide your own certificate if you want, but the filename is different. See https://wiki.unraid.net/Manual/Security#Custom_Certificates 

 

So have your shell script put the certificate here:

/boot/config/ssl/certs/[servername]_unraid_bundle.pem

And then run:

/etc/rc.d/rc.nginx reload

 

Thank you, that made it!

Hi all, sorry to dig this post back up, but my post with the same question is not getting any responses so hoping to get your advice here.

 

I'm facing issues where my public WAN IP will change courtesy of my ISP. I'm guessing the SSL cert gets invalidated, as it makes it impossible to remotely access my server unless I physically travel to the server (which is offsite), connect locally, and delete the cert and provision a new one.

 

Does the ability to delete and re-provision the certs programmatically exist for such a use case?