Ovh - OpenWrt - synology mail

Help
1

Dear all, i received an email to renew my certificate for loft.domo-tic.com

I have changed many thinks on my personal LAN.

Openwrt it in last release

Hostname	OpenWrt
Model	TP-Link TL-WDR4900 v1
Architecture	e500v2
Target Platform	mpc85xx/p1010
Firmware Version	OpenWrt 24.10.0 r28427-6df0e3d02a / LuCI openwrt-24.10 branch 25.080.48760~19939dd
Kernel Version	6.6.73

Same for my synology NAS

DSM 7.2.2-72806 Update 3

i have a domain registered in ovh as domo-tic.com. i have activated api has described here
[TUTO] Certificat Let's Encrypt avec acme.sh & api Ovh en Docker (DSM6/7) (Update 07/09/22) - Tutoriels - NAS-Forum

i tryed to instal acme on openwrt (192.168.1.1) but i still have an alert in browser on https

i have check with tool let's debug and seems to be ok

But If i try to use imap from my emal client, i get this message :

Capture d’écran 2025-03-24 122416
Capture d’écran 2025-03-24 122416482×244 6.14 KB

Thanks in advance for your help.
Arnaud

2

You're trying to access your system using a private IP, but the certificate doesn't include that IP in its SANs. As far as I know, it's not possible to obtain a Let's Encrypt certificate for a private IP address. You should access the service using a DNS name that the certificate was issued for.

1 Like
3

Thank for your response @os11k .

Sorry, but this is new for me !

what I understand that i can not use thecertificate from OVH (domo-tic.com) under loft.domo-tic.com ?

thansk again.
Arnaud

4

It should work to connect using https://loft.domo-tic.com

It will not work if using https://192.168.1.159

Maybe you need to modify your hosts file so you can use the domain name

The domain name in the certificate must match the one in the URL

2 Likes