Security error certificate issue

Share your awesome tips and tricks here.
brujo
Posts: 38
youtube meble na wymiar Warszawa
Joined: Tue Nov 15, 2022 9:42 pm

Security error certificate issue

Post by brujo »

Hi
I am receiving the following error on my browser when I attempt to go to my AS6704T NAS:
"Security Error" "go back" "proceed anyway"
If I select "proceed anyway", I see the following message:

"Your connection is not secure
xxxxxx.myasustor.com" certificate name does not match input.
You should not enter any sensitive information on this site because it could be stolen by attackers.
Certificate Details"

Diging down, I see a page that describes an error with the "let's script" certificate:
"Issued To
COMMON NAME (CN)
xxxxxxx..myasustor.com
Issued By
COMMON NAME (CN)
R3
ORGANIZATION (0)
Let's Encrypt
COUNTRY (C)
US
Validity Period
ISSUED ON
Dec 9, 2022 at 8:02:30 AM EST
EXPIRES ON
Mar 9, 2023 at 8:02:29 AM EST
Serial Number
04 A5 1A BC 2B C1 FD 61 0A C2 A3 6E 40 40 27 8F E5 3C
Extensions
ALTERNATIVE DNS NAMES
xxxxxx.myasustor.com"

How can I fix this issue?
I just know the network basics
Thank You
Mario
Last edited by brujo on Sat Dec 31, 2022 10:27 am, edited 3 times in total.
User avatar
Nazar78
Posts: 2068
Joined: Wed Jul 17, 2019 10:21 pm
Location: Singapore
Contact:

Re: Security error certificate issue

Post by Nazar78 »

Firstly, please edit and redact your DDNS name, else everyone will be able to reach your NAS.

Secondly the way you access the domain should match the CN (or one of the SANs if applicable). E.g. your DDNS is 1234.myasustor.com, then you'll need to access as https://1234.myasustor.com:8001.
AS5304T - 16GB DDR4 - ADM-OS modded on 2GB RAM
Internal:
- 4x10TB Toshiba RAID10 Ext4-Journal=Off
External 5 Bay USB3:
- 4x2TB Seagate modded RAID0 Btrfs-Compression
- 480GB Intel SSD for modded dm-cache (initramfs auto update patch) and Apps

When posting, consider checking the box "Notify me when a reply is posted" to get faster response
brujo
Posts: 38
Joined: Tue Nov 15, 2022 9:42 pm

Re: Security error certificate issue

Post by brujo »

Hi Nazar78
Thank you for your reply
Do you mean the "Server Name" on ""Network" "Settings"?
Do I need to rename the "Cloud ID"?
Thank You
Mario
User avatar
Nazar78
Posts: 2068
Joined: Wed Jul 17, 2019 10:21 pm
Location: Singapore
Contact:

Re: Security error certificate issue

Post by Nazar78 »

No I mean edit your original post to remove your domain name because anyone can try to connect to it.

What URL did you use to access your NAS that you got that error? Did you access using IP? E.g. https://192.168.1.x:8000? If that's the case then it's perfectly normal to see that error.

If that's not the case then try give more details, screenshots might help.
AS5304T - 16GB DDR4 - ADM-OS modded on 2GB RAM
Internal:
- 4x10TB Toshiba RAID10 Ext4-Journal=Off
External 5 Bay USB3:
- 4x2TB Seagate modded RAID0 Btrfs-Compression
- 480GB Intel SSD for modded dm-cache (initramfs auto update patch) and Apps

When posting, consider checking the box "Notify me when a reply is posted" to get faster response
brujo
Posts: 38
Joined: Tue Nov 15, 2022 9:42 pm

Re: Security error certificate issue

Post by brujo »

Thank you for your help, I appreciate it.
Mario
User avatar
Nazar78
Posts: 2068
Joined: Wed Jul 17, 2019 10:21 pm
Location: Singapore
Contact:

Re: Security error certificate issue

Post by Nazar78 »

No problem but you still left your domain seen in the second paragraph.
AS5304T - 16GB DDR4 - ADM-OS modded on 2GB RAM
Internal:
- 4x10TB Toshiba RAID10 Ext4-Journal=Off
External 5 Bay USB3:
- 4x2TB Seagate modded RAID0 Btrfs-Compression
- 480GB Intel SSD for modded dm-cache (initramfs auto update patch) and Apps

When posting, consider checking the box "Notify me when a reply is posted" to get faster response
brujo
Posts: 38
Joined: Tue Nov 15, 2022 9:42 pm

Re: Security error certificate issue

Post by brujo »

Hi Nazar78
I imported a certificate and I am not able to remove it, I am able to edit or set it as default but not remove it.
Is there another way to remove it from the list.(See attached screen shot)

I tried to create a lest script, however, it says I reached the limit.
Do I have to wait a week to try again?

Again, I really appreciate all your help.
Thank You
Mario
User avatar
Nazar78
Posts: 2068
Joined: Wed Jul 17, 2019 10:21 pm
Location: Singapore
Contact:

Re: Security error certificate issue

Post by Nazar78 »

brujo wrote:Hi Nazar78
I imported a certificate and I am not able to remove it, I am able to edit or set it as default but not remove it.
Is there another way to remove it from the list.(See attached screen shot)

I tried to create a lest script, however, it says I reached the limit.
Do I have to wait a week to try again?

Again, I really appreciate all your help.
Thank You
Mario
Yes you'll have to wait or use another email/DDNS. To remove a cert, you need to set another cert as default, set the cert that comes with ADM as default then you can remove the previous cert.

PS: I don't see your screenshot. Edited: also of course you can't remove the cert issued by Asustor.
AS5304T - 16GB DDR4 - ADM-OS modded on 2GB RAM
Internal:
- 4x10TB Toshiba RAID10 Ext4-Journal=Off
External 5 Bay USB3:
- 4x2TB Seagate modded RAID0 Btrfs-Compression
- 480GB Intel SSD for modded dm-cache (initramfs auto update patch) and Apps

When posting, consider checking the box "Notify me when a reply is posted" to get faster response
brujo
Posts: 38
Joined: Tue Nov 15, 2022 9:42 pm

Re: Security error certificate issue

Post by brujo »

Hi Nazar78
The DDNS should point to my public IP?
I was able to create the let's Script, however, I still get the "An SSL error has occurred and a secure connection to the server cannot be made"

When I type my public IP with xxx.xxx.xxx:xxx80 I get the following:
"Congratulations! You have successfully enabled the Web server on your ASUSTOR NAS".
Shouldn't I be getting a secure connection?
Where else should I be looking?
As always, my thanks for all your help.
Mario
User avatar
Nazar78
Posts: 2068
Joined: Wed Jul 17, 2019 10:21 pm
Location: Singapore
Contact:

Re: Security error certificate issue

Post by Nazar78 »

The DDNS should point to my public IP?
Yes.

HTTPS is default port 443. Think you need to show some screenshots.
AS5304T - 16GB DDR4 - ADM-OS modded on 2GB RAM
Internal:
- 4x10TB Toshiba RAID10 Ext4-Journal=Off
External 5 Bay USB3:
- 4x2TB Seagate modded RAID0 Btrfs-Compression
- 480GB Intel SSD for modded dm-cache (initramfs auto update patch) and Apps

When posting, consider checking the box "Notify me when a reply is posted" to get faster response
Post Reply

Return to “Tips & Tricks”