ljack

Creating UniFi-Friendly TLS Certificates Using mkcert

UniFi devices (UDM/UDM-SE/CloudKey) are picky about certificates.
They require:

• A valid Common Name (CN)
• A correct Subject Alternative Name (SAN) list
• A certificate and key that mathematically match
• No missing SANs (or the UI and WebSockets will fail)

This article shows how to generate a fully working UniFi certificate using mkcert and how to refine it using OpenSSL.

ljack

🔐 Creating UniFi-Friendly TLS Certificates Using mkcert

UniFi devices (UDM/UDM-SE/CloudKey) are unusually strict about TLS certificates.
They require:

A valid Common Name (CN)

Correct Subject Alternative Names (SAN)

A matching private key

ljack

from os import listdir,SEEK_END
from os.path import isfile, join, getmtime
from http.server import BaseHTTPRequestHandler, HTTPServer
import socketserver
import time
import subprocess
import select
from urllib.parse import parse_qs,urlparse
import logging
import sys, os, socket

ljack

 // Component which groups row buttons
 export default const ButtonsComponent = React.createClass({
      render: function() {
        // console.log("ButtonsComponent: render this=", this);
        const paddingStyle = {
          leftPadding: "5px"
        };
        return ( < form className = "form-inline"
          style = {
            paddingStyle

ljack

import {
    apolloServer
}
from 'graphql-tools';
import express from 'express';
import bodyParser from 'body-parser';

const app = express();
app.use(bodyParser.urlencoded({
    extended: true

ljack

// GriddleGriddle ColumnMeta's with some custom components 
export const ColumnMeta = [{
    "columnName": "name",
  }, {
    "columnName": "url",
    "displayName": "URL"
  }, {
    "columnName": "method",
  }, {
    "columnName": "lastResult",

ljack

import React from "react";
// React button component to simulate start/stop failure scenario
export default const StartButton = React.createClass({

  forward() {
      const baseDelay = 4*1000;
      switch (this.state.status) {
        case 'recovering':

          break;

ljack

function phrase_action_message (action) {
  if (~action.task.name.indexOf('<node.name>')) {
    return action.task.name.replace('<node.name>', action.node.name);
  }
  return action.task.name + ' on ' + action.node.name;
}