ssl-managment/unifi_connection_test_results.md

UniFi Connection Test Results

Summary

We attempted to verify the UniFi device connection parameters in config.json by creating a test script that uses the unifiControl Python library to connect to the UniFi device. The test was able to establish a connection to the device, but authentication failed with a 401 Unauthorized error.

Test Details

Connection Parameters Used

• Host: udm-se.mgeppert.com
• Port: 443
• Username: SSLCertificate
• Password: cYu2E1OWt0XseVf9j5ML

Test Process

1. Installed the unifiControl Python library
2. Created a test script that loads the UniFi connection parameters from config.json
3. Configured the test to disable SSL certificate verification
4. Attempted to connect to the UniFi device and authenticate
5. Received a 401 Unauthorized response from the server

HTTP Request/Response Details

POST /api/login HTTP/1.1
Host: udm-se.mgeppert.com
User-Agent: python-requests/2.32.4
Accept-Encoding: gzip, deflate
Accept: */*
Connection: keep-alive
Content-Length: 66
Content-Type: application/json

{"username": "SSLCertificate", "password": "cYu2E1OWt0XseVf9j5ML"}

HTTP/1.1 401 Unauthorized
Server: nginx
Date: Mon, 21 Jul 2025 01:28:25 GMT
Content-Type: application/json
Content-Length: 47
Connection: keep-alive
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Robots-Tag: noindex
Set-Cookie: TOKEN=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; samesite=none; secure; httponly; partitioned
Set-Cookie: TOKEN=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; samesite=none; secure; httponly

Findings

1. The UniFi device at udm-se.mgeppert.com is reachable and responding to HTTPS requests on port 443
2. The SSL certificate verification was successfully disabled in our test
3. The authentication attempt with the provided credentials failed with a 401 Unauthorized error
4. The server is running nginx and appears to be a UniFi device based on the API endpoint (/api/login)

Possible Issues

1. Incorrect Credentials: The username or password in config.json may be incorrect
2. Account Locked or Disabled: The account "SSLCertificate" may be locked or disabled on the UniFi device
3. Different Authentication Method: The UniFi device may require a different authentication method or endpoint
4. API Version Mismatch: The unifiControl library may be using an API version that's incompatible with the device

Recommendations

1. Verify Credentials: Double-check the username and password in config.json
2. Check Account Status: Log in to the UniFi device's web interface and verify that the "SSLCertificate" account exists and is enabled
3. Try Different Authentication Method: The UniFi device may require a different authentication method or endpoint. Check the device's documentation for the correct API endpoints
4. Check API Version Compatibility: Verify that the unifiControl library is compatible with the UniFi device's firmware version
5. Try Manual Authentication: Use a tool like curl or Postman to manually attempt authentication with the UniFi device to verify the correct API endpoints and authentication method
6. Check Logs: Check the UniFi device's logs for any authentication failure messages that might provide more information

Next Steps

1. Update the credentials in config.json if they are incorrect
2. If the credentials are correct, check the UniFi device's configuration and logs for more information
3. Consider using a different authentication method or API library if the unifiControl library is incompatible with the device