All, like others I too am on a Synology using the built in Let’s Encrypt support. I am on DSM 6.2.1-23824 Update 4. I received the email about TLS-SNI-01 deprecation. I’m very sure that I am only using LE with the Synology at this point and definitely in the last 60 days. But, I see some other t…

There is definitely something wonky going on with the synology. My Synology has been kept up to date on DSM versions (no longer than a week after a new versions is installed my system is updated) and I got the email. According to Synology, it should not be possible for me to get this message, and y…

Hmm… Do you control the firewall? If so, you could test a forced renewal with https port blocked to your DSM server (forcing http). If that succeeds now then it will succeed after 2/13.

This is exactly what I’m doing: I’m going to force renew the day before deprecation of TLS-SNI-01 and then I’ll do it again a couple of days after. This will give me a couple of months to sort things out if the 2nd renewal fails. It seems Synology, at least the front line techs, are not prepared …

Hi majors! How do you force an update of the certificate? Thanks

Go into the Control Panel of your Synology Click Security Click Certificate Click the certificate you want to renew Click the drop down menu that is attached to “Add” (weird, I know, you’re not adding.) Choose renew certificate Good luck!

As root, or using sudo: ls /usr/syno/etc/certificate/_archive You will see INFO, DEFAULT, and something else. You need the something else. If you have multiple something elses, you will need to do this for each one. /usr/syno/sbin/syno-letsencrypt renew -c <something>

That is weird. Didn’t think to look there Thank you

Nice to meet a fellow Synology user that is using advanced features. Here is what Synology tech support told me and I am disappointed that they can’t give a definitive date on status of supporting TLS-ALPN-01. Instead they are recommending unencrypted protocols which make the platform vulnerable …

I am interested in getting away from the Synology DDNS and would like to learn more about other options. At one time I was an ISP/ASP provider and operated my own DNS servers and had my own C-block but now I am reduced to the lowly dependency of a dual cable model Comcast setup using residential a…

Here is what Synology tech support provided to me late Friday: "We are aware of the change with Let’s Encrypt, however this will not aﬀect your certiﬁcates. There are 2 kinds of validations when applying for Let’s Encrypt certiﬁcates in DSM 6.0+: dns01 and http01 validations. You should not see any…

Synology TLS-SNI-01 End of Life Email?

Help

mnordhoff January 22, 2019, 6:00am 30

The security issue was reported to Let's Encrypt 2018-01-09. TLS-SNI-01 was immediately disabled, then temporarily reenabled for renewals a few days later. The specific end date was announced in October.

Topic		Replies	Views
ACME TLS-SNI-01 on Synology NAS Help	10	8077	January 28, 2019
Synology, TLS-ALPN-01 Server	2	1474	February 12, 2019
Action required: Let's Encrypt certificate renewals Help	21	6312	January 21, 2019
Action is required to prevent your Let's Encrypt certificate renewals from breaking Help	6	1523	January 18, 2019
TLS-SNI-01 validation is reaching end-of-life Help	25	5278	February 6, 2019

Synology TLS-SNI-01 End of Life Email?

Related topics