I need help it's SSL to my synology DSM

[Jayz]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

It’s Synology DSM work space!!

I did DMZ to my DSM NAS
so i didn’t port forwarding my nas internal IP
my Xpenology 6.2.23… ds 3615xs

My domain is: jjongnas.duckdns.org

I ran this command: Do make let’s Encrypt

it’s synology DSM

Domain : jjongnas.duckdns.org

E mail Add : {my Email add}

sub Domain : jjongnas.duckdns.org

It produced this output: work failed you should re login

My web server is (include version):

The operating syst

[JuergenAuer]

Hi @Jayz

@Jayz

My domain is: jjongnas.duckdns.org

I ran this command: Do make let’s Encrypt

checking your domain that looks ok - https://check-your-website.server-daten.de/?q=jjongnas.duckdns.org

Port 80 is open and answers, checking a random file in /.well-known/acme-challenge there is the expected result http status 404 - Not Found and a Synology page.

So if your Synology configuration is ok, the certificate creation should work.

--> First step: Check, if there is an update of your DSM.

You have some older certificates:

Issuer	not before	not after	Domain names	LE-Duplicate	next LE
Let's Encrypt Authority X3	2019-09-22	2019-12-21	jjongnas.duckdns.org
1 entries
Let's Encrypt Authority X3	2019-07-19	2019-10-17	jjongnas.duckdns.org
1 entries
Let's Encrypt Authority X3	2019-05-15	2019-08-13	jjongnas.duckdns.org
1 entries

But why don't you use the certificate created 2019-09-22?

You use a self signed certificate.

CN=synology.com, O=Synology Inc., L=Taipei, C=TW
	30.11.2019
	17.08.2039
expires in 7197 days

Where is this certificate created 2019-09-22?

[Jayz]

1. Where is this certificate created 2019-09-22?

Because i re install and re bulid my nas … and my storage RAID is broken
So i can’t find it…

2. Port 80 is open and answers, checking a random file in /.well-known/acme-challenge there is the expected result http status 404 - Not Found and a Synology page.

i set up DMZ
but do i must still do port forwarding 80 and 443 ??

[JuergenAuer]

@Jayz

but do i must still do port forwarding 80 and 443 ??

Your port forwarding looks ok.

There

http://jjongnas.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

is the expected result. Port 80 extern -> port 80 intern.