SSL Certificate for own domain to access QNAP not working. Help needed, please.

Post your questions about Web Server usage and Apache + PHP + MySQL/SQLite web applications.
Post Reply
pol77
Starting out
Posts: 19
Joined: Wed Jun 19, 2024 2:43 am

SSL Certificate for own domain to access QNAP not working. Help needed, please.

Post by pol77 »

Dear all,

I'm very new at QNAP NAS and SSL certificates, so the answer could be something fairly obvious but I cannot figure it out.

I have a QNAP TS-873A running QuTS hero h5.2.0.2782 build 20240601 Release Candidate and I can access it securely through the http://XXXXX.myqnapcloud.com link, with the free Let's Encrypt certificate created by the NAS.

I want to be able to access the NAS using my own domain name. I used Certify The Web to create a root and wildcard certificate for my own domain name and then used Deploy to Apache to export the certificate and private key to files. I have uploaded them to the NAS and they have been accepted and replaced the myqnapcloud domain SSL certificate.

I went to my DNS control panel and set a CNAME entry to forward https://nas.MYDOMAINNAME.com to https://XXXXX.myqnapcloud.com and the put an entry in the reverse proxy in the control panel to forward https://nas.MYDOMAINNAME.com to the correct port I have set for https access.

It all works fine and it gets to the login page, but it still says it is not secure, even though the certificate is still visible and active under Control Panel --> Security --> SSL Certificate and Private Key.

Any ideas why I still don't get a secure connection even though the certificate is in place or what I need to do differently?
User avatar
dolbyman
Guru
Posts: 35811
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: SSL Certificate for own domain to access QNAP not working. Help needed, please.

Post by dolbyman »

I hope you are aware that SSL is a transport encryption and does not protect your NAS at all.

There has been many ransomware campaigns targeting web exposed QNAP NAS and millions in ransom paid by subsequent victims.

viewtopic.php?t=164797
pol77
Starting out
Posts: 19
Joined: Wed Jun 19, 2024 2:43 am

Re: SSL Certificate for own domain to access QNAP not working. Help needed, please.

Post by pol77 »

I'm aware of the dangers, thank you.
dosborne
Experience counts
Posts: 1972
Joined: Tue May 29, 2018 3:02 am
Location: Ottawa, Ontario, Canada

Re: SSL Certificate for own domain to access QNAP not working. Help needed, please.

Post by dosborne »

A screen capture of the security warning (with detail) might be helpful.

I hope you have a great recovery plan implemented, tested and current.
QNAP TS-563-16G 5x10TB Seagate Ironwolf HDD Raid-5 NIC: 2x1GB 1x10GbE
QNAP TS-231P-US 2x18TB Seagate Exos HDD Raid-1
[Deadbolt and General Ransomware Detection, Prevention, Recovery & MORE]
pol77
Starting out
Posts: 19
Joined: Wed Jun 19, 2024 2:43 am

Re: SSL Certificate for own domain to access QNAP not working. Help needed, please.

Post by pol77 »

I have moved away from this configuration so I cannot provide a screenshot. It was the typical situation you get when a website does not provide an ssl certificate.

I do have an amazin recoverplan - nothing on the NAS is irreplaceable - there are offline copies of everthing on it.

I'm learning and experimenting at the moment. I have now used an alternative DDNS and a reverse proxy to access my NAS without the help of qnapcloud but the container station does not like the fact that I'm connecting to the nas with a different SSL certificate than the qnapcloud one. It works but the console is not working. If I connect to the nas via the qnapcloud link, the console in container station works fine. If I resolve this, I can disable the myqnapcloud access.
Post Reply

Return to “Web Server & Applications (Apache + PHP + MySQL / SQLite)”