Copy SSL certificate from UNMS to Unifi Controller

renew.sh

#!/bin/bash

UNMS_CONTAINER=unms-nginx

UNIFI_CONTAINER=unifi-network-application
UNIFI_CONFIG_PATH=/etc/unifi

CRT_FINAL=${UNIFI_CONFIG_PATH}/live.crt
KEY_FINAL=${UNIFI_CONFIG_PATH}/live.key
CRT_TMP=$(mktemp)

# docker copy doesn't follow symlinks, so we have to do this manually
docker exec "${UNMS_CONTAINER}" cat /cert/live.crt > ${CRT_TMP}

# check if the new certificate is different from the old one
[ -f "${CRT_FINAL}" ] && [ "$(cat "${CRT_FINAL}" | md5sum)" == "$(cat "${CRT_TMP}" | md5sum)" ] && {
    echo "Certificate already updated, exiting ..."
    exit
}

docker exec "${UNMS_CONTAINER}" cat /cert/live.key > ${KEY_FINAL}

openssl pkcs12 -export \
  -inkey ${UNIFI_CONFIG_PATH}/live.key \
  -in ${UNIFI_CONFIG_PATH}/live.crt \
  -out ${UNIFI_CONFIG_PATH}/live.p12 \
  -name unifi -password pass:temppass

docker exec ${UNIFI_CONTAINER} \
  keytool -importkeystore \
  -deststorepass aircontrolenterprise \
  -destkeypass aircontrolenterprise \
  -destkeystore /config/data/keystore \
  -srckeystore /config/live.p12 \
  -srcstoretype PKCS12 \
  -srcstorepass temppass \
  -alias unifi \
  -noprompt

docker restart ${UNIFI_CONTAINER}