This uses acme.sh to generate a certificate which replaces the one shown in the certificate section in the Untangle UI.
It updates on each run and if the certificate is renewed it replaces the one used by untangle and restarts apache.
if the certificate isn’t renewed, it still checks if the certificate untangle is using is the one cached by acme.sh and it will replace it and restart apache if necessary.
The crontab entries allow it to do a certificate check at reboot and also at 4am every morning.
You’ll need to download acme.sh, but it requires no extra dependencies over what is supplied in untangle, you will need to edit the acme.sh configuration file to match how you update the cert.