This morning I setup my asustor with a cert from LetsEncrypt
Following this guide I was able to get this setup (Synology based, requires access to another linux machine)
https://www.reddit.com/r/synology/comme ... ogy_units/
The only step I had to do differently was to stop the web server, use: pkill myhttpd
After you have the certificate, append the fullchain.pem file with the contents of the privkey.pem. Do not add any extra spaces or line breaks.
Applying the certificate will restart the web services.
LetsEncrypt (Free SSL Certificate) & Asustor
-
- Posts: 27
- youtube meble na wymiar Warszawa
- Joined: Fri Apr 05, 2013 11:26 pm
-
- Posts: 27
- Joined: Fri Apr 05, 2013 11:26 pm
Re: LetsEncrypt (Free SSL Certificate) & Asustor
Found that you also have to manually add the chain cert in order for the cert to be trusted on some platforms (mobile):
Edit -> /volume0/usr/builtin/etc/apache2/mods-enabled/ssl.conf
Remove # from #SSLCertificateChainFile "/usr/builtin/etc/apache2/server-ca.crt"
add the chain.pem file:
vi /usr/builtin/etc/apache2/server-ca.crt
paste the contents of the chain.pem file, save
Restart apache service
/volume0/usr/builtin/etc.default/init.d/S54apache2 stop
/volume0/usr/builtin/etc.default/init.d/S54apache2 start
Edit -> /volume0/usr/builtin/etc/apache2/mods-enabled/ssl.conf
Remove # from #SSLCertificateChainFile "/usr/builtin/etc/apache2/server-ca.crt"
add the chain.pem file:
vi /usr/builtin/etc/apache2/server-ca.crt
paste the contents of the chain.pem file, save
Restart apache service
/volume0/usr/builtin/etc.default/init.d/S54apache2 stop
/volume0/usr/builtin/etc.default/init.d/S54apache2 start
- Kapitein Haak
- Posts: 333
- Joined: Tue Oct 15, 2013 2:40 pm
- Location: Stranded on the Dutch coast.
Re: LetsEncrypt (Free SSL Certificate) & Asustor
Hello Jscoleman,
To bad that one requires a separate Linux machine to install the Letsencrypt certificates. The latest (beta?) Synology firmware support LetsEncrypt certificates, which is a great feature. All the connections to the NAS with a free, easy to configure and install certificate.
Best regards,
Kapitein Haak.
To bad that one requires a separate Linux machine to install the Letsencrypt certificates. The latest (beta?) Synology firmware support LetsEncrypt certificates, which is a great feature. All the connections to the NAS with a free, easy to configure and install certificate.
Best regards,
Kapitein Haak.
"What would the world be like without Captain Hook?"
---
"Homo sapiens non urinat in ventum" (A wise man doesn't piss into the wind), only in Amsterdam:
https://www.google.nl/maps/@52.36289,4. ... 312!8i6656
---
"Homo sapiens non urinat in ventum" (A wise man doesn't piss into the wind), only in Amsterdam:
https://www.google.nl/maps/@52.36289,4. ... 312!8i6656