Programmatically provision SSL certificate

[neuer_unraider]

Hey, I'm providing a custom SSL certificate to Unraid and update it with a shellscript.

Still, I need to click the "Provision" button under "Settings -> Management Access" manually:

 

 

How can I invoke the functionality of that button from my shellscript that's running on the server?

[Kilrah]

You don't need to, there's already an autoupdate function built-in.

 

Quote

After an Unraid.net SSL Certificate has been installed, two background services are activated while the server is signed in to unraid.net:

updatedns - This starts 30 seconds after server reboot has completed and contacts the Lime Technology DNS service to register the servers local IP address. Thereafter it wakes up every 10 minutes in case the local IP address has changed.

renewcert - This starts 60 seconds after server reboot has completed and contacts the Lime Technology certificate renewal service to determine if your Unraid.net SSL certificate needs to be renewed. Thereafter it wakes up every 24 hours. If within 30 days of expiration, a new certificate is automatically provisioned and downloaded to your server.

 

[neuer_unraider]

 

This is the path it shows in the settings UI. I just replace that file with my custom certificate (it has nothing todo with Unraid.net or whatever server they offer), but nothing happens.

Unraid only picks it up when I press "Provision".

 

So I assume that I need to press that button. If there's a better way, please tell me

[Kilrah]

Anything Unraid stores in /boot/config is only loaded at boot time, then resides in RAM so it's normal that it doesn't get picked up.

 

It's not clear what the purpose is but it seems you should probably be using a reverse proxy container rather than hijacking this feature.

Edited July 26, 2022 by Kilrah

[neuer_unraider]

@Kilrah I am not hijacking anything, it's even officially documented here: https://wiki.unraid.net/Manual/Security#Custom_Certificates

[ljm42]

The "Provision" button will provision a myunraid.net certificate. There is no need to press it if you are providing your own custom certificate.

 

You can provide your own certificate if you want, but the filename is different. See https://wiki.unraid.net/Manual/Security#Custom_Certificates 

 

So have your shell script put the certificate here:

/boot/config/ssl/certs/[servername]_unraid_bundle.pem

And then run:

/etc/rc.d/rc.nginx reload

 

[neuer_unraider]

Thank you, that made it!