3VAbdAVE

> We need a check for keytool and if it does not exist use openssl. Running a Unifi Dream Machine with the same poblem. I'm not sure openssl can create...

Once the keytool problem is sorted and the certificates correctly converted to a JKS keystore, the next problem is that the default Unifi console uses weak ciphers that aren't compatible...

> Openssl can create a java compatible keystore. If fact you should be using it instead of keytool these days for acme.sh. The instructions are here https://docs.oracle.com/cd/E19509-01/820-3503/ggfhb/index.html > It looks...

Potentially. Tested on a UDM (not the UDM Pro), and don't have any other devices to test with. Welcome to take a look at my updates: https://github.com/3VAbdAVE/acme.sh/blob/dev/deploy/unifi.sh Here's where I...

Gonna expand on @sholdee 's comment. This has become more important with Bookworm, since Python 3.11 defaults to failing pip installs without a "--break-system-packages" argument, and that's kinda (intentionally) scary...