Invalid certificate- how to repair- help

[Rendys007]

Hello, for almost 2 years I've been running on NAS without any issues, almost non-stop. Docker, web server, etc.

A few days ago, I used the web interface of Synology (clicked on renew certificate).

The original certificate was still valid, I probably made a mistake.

Unfortunately, since then I have no access to the Synology web interface.

 

This error:

NET::ERR_CERT_INVALID

Subject: synology.com

Issuer: Synology Inc. CA

Expires on: 9. 6. 2025

Current date: 10. 6. 2024

PEM encoded chain:

-----BEGIN CERTIFICATE-----

...

-----END CERTIFICATE-----

 

I can still access the NAS via ssh, scp, tftp, so I tried to generate my own certificates with self-signature.

 

Like this:

sudo openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout /usr/syno/etc/certificate/_archive/server.key -out /usr/syno/etc/certificate/_archive/server.crt

sudo chmod 600 /usr/syno/etc/certificate/_archive/server.key

sudo chmod 644 /usr/syno/etc/certificate/_archive/server.crt

sudo chown root/usr/syno/etc/certificate/_archive/server.key

sudo chown root/usr/syno/etc/certificate/_archive/server.crt

 

It didn't help, so I tried further to modify the configuration file nginx.conf and add lines to all blocks under server with the location of the certificate where I saved them:

 

... server {

           listen 443 ssl;

          ssl_certificate /usr/syno/etc/certificate/_archive/server.crt;

          ssl_certificate_key /usr/syno/etc/certificate/_archive/server.key;

... }

sudo vi /etc/nginx/nginx.conf

sudo systemctl restart nginx

sudo reboot

 

And no change, I can't access the web interface neither via http nor https. Only through the terminal.

Any advice on what to do next, did I copy to the wrong directories (-archive)?

 

How to proceed?

 

Sorry this is translator.

 

Thanks in advance for any guidance and help.

Edited June 10, 2024 by Rendys007

[Rendys007]

So I finally solved it, simple. I reinstalled the NAS to the latest DSM.