Chrome error trying to connect: "Your connection is not private" (SSL cert. present)

Post your questions about Web Server usage and Apache + PHP + MySQL/SQLite web applications.
Post Reply
KoenTanghe
New here
Posts: 6
Joined: Wed Aug 25, 2010 3:35 am

Chrome error trying to connect: "Your connection is not private" (SSL cert. present)

Post by KoenTanghe » Mon Jun 08, 2020 12:42 am

Hi,

this is something that's been bothering me for quite a while now: whenever I try to connect to the browser-based admin panel of my NAS (an old TS-509 Pro which has been working very well over the past years by the way), I am seeing an error message in Chrome saying: "Your connection is not private", and then this code: NET::ERR_CERT_COMMON_NAME_INVALID
I can still ignore this, and click "Proceed to nas (unsafe)" and all works fine (I end up at https://nas:4433/cgi-bin/ and can login fine).

I did install an SSL certificate on the NAS: a wildcard certificate that I also use for my website *.mycompany.com, and it is current and valid.
But I think the issue is that my NAS is not setup in the mycompany.com domain, and so the certificate doesn't match the NAS's domain, which rightfully leads to Chrome warning about this mismatch.

So, my question is: how and where can I change this (preferably through the admin panel), so that I can setup the NAS to be nas.mycompany.com for example, which should fix this, I guess?
The NAS doesn't run a public webserver, I mainly use it for backups and data set storage.

Thanks,
Koen

User avatar
jaysona
Know my way around
Posts: 193
Joined: Tue Dec 02, 2008 11:26 am

Re: Chrome error trying to connect: "Your connection is not private" (SSL cert. present)

Post by jaysona » Mon Jun 08, 2020 3:17 am

KoenTanghe wrote: ↑
Mon Jun 08, 2020 12:42 am
Hi,

this is something that's been bothering me for quite a while now: whenever I try to connect to the browser-based admin panel of my NAS (an old TS-509 Pro which has been working very well over the past years by the way), I am seeing an error message in Chrome saying: "Your connection is not private", and then this code: NET::ERR_CERT_COMMON_NAME_INVALID
I can still ignore this, and click "Proceed to nas (unsafe)" and all works fine (I end up at https://nas:4433/cgi-bin/ and can login fine).

I did install an SSL certificate on the NAS: a wildcard certificate that I also use for my website *.mycompany.com, and it is current and valid.
But I think the issue is that my NAS is not setup in the mycompany.com domain, and so the certificate doesn't match the NAS's domain, which rightfully leads to Chrome warning about this mismatch.

So, my question is: how and where can I change this (preferably through the admin panel), so that I can setup the NAS to be nas.mycompany.com for example, which should fix this, I guess?
The NAS doesn't run a public webserver, I mainly use it for backups and data set storage.

Thanks,
Koen
The reason Chrome is reporting those errors is because the NAS IP does not match a DNS FQDN (Fully Qualified Domain Name), there are two ways to fix this, external DNS server host name entry or entry on your pc.

For Windows, you will need to add the IP address of your NAS to the hosts files in C:\Windows\System32\drivers\etc The entry would look something like this:

Code: Select all

192.168.249.108		hostname.mycompany.com	hostname
** of course you will need to use your own internal IP address and hostname, but you should get the idea.

But all of this is really unnecessary, the web browser connection is quite private, even with the certificate error message, the message is just a false positive due to some draconian members of the CA/B forum. :roll:
H/W: TS-219 Pro / TS-269 Pro / TS-253 Pro (8Gig)
H/W: TS-509 Pro x2 / TS-569 Pro / TS-670 Pro (i7-3770S 16Gig) x2 / TS-853 Pro (8Gig)
O/S: Slackware 14.2 / MS Windows 7-64 (x5)
Router1: Asus RT-AC86U - Asuswrt-Merlin - 384.18
Router2: Asus RT-AC68U - DD-WRT v3.0-r39960M kongac
Router3: Linksys WRT1900AC - DD-WRT v3.0-r43028 std
Router4: Asus RT-AC66U - FreshTomato v2020.3
Misc: Popcorn Hour A-110/WN-100, Pinnacle Show Center 250HD, Roku SoundBridge Radio (all retired)

KoenTanghe
New here
Posts: 6
Joined: Wed Aug 25, 2010 3:35 am

Re: Chrome error trying to connect: "Your connection is not private" (SSL cert. present)

Post by KoenTanghe » Tue Jun 09, 2020 6:52 am

The Windows hosts file worked fine, and I'll keep it like that for now.
Thanks,
Koen

Post Reply

Return to “Web Server & Applications (Apache + PHP + MySQL / SQLite)”