letsencrypt-unifi-controller-osx.sh

#!/bin/bash

mkdir -p /tmp/certbot/public_html/
cd /tmp/certbot/public_html

# forward external port 80 to internal port [unifi-controller-ip]:9000
python -m SimpleHTTPServer 9000

sudo cp -r /etc/letsencrypt/live/unifi.domain.com/ ~/Desktop/certbot/
# renew certificate
# sudo certbot renew --webroot -w /tmp/certbot/public_html

cd ~/Desktop/certbot/

# convert PEM to PKCS12 format
openssl pkcs12 -export -in ~/Desktop/certbot/cert.pem -inkey privkey.pem -certfile chain.pem -out unifi.p12 -name unifi -password pass:aircontrolenterprise

# import SSL certificate to the unifi keystore, requires Java SDK [http://www.oracle.com/technetwork/java/javase/downloads/index.html]
keytool -importkeystore -srckeystore unifi.p12 -srcstoretype PKCS12 -srcstorepass aircontrolenterprise -destkeystore /Applications/Unifi.app/Contents/Resources/data/keystore -storepass aircontrolenterprise