Hi all, hope you can help. I used Let’s Encrypt on my Synology NAS for a while now. I use 1980 and 1981 ports for HTTP and HTTPS respectively. Port 80 and 443 are open and accessible on my router and I can acces my server both over http and https.
My domain is: keuken.smeurko.es
I ran this command:
DSM Control Panel > Security > Certificate. Add/replace certificate > Let’s Encrypt.
Domain name: keuken.smeurko.es
Alternative name: none
It produced this output: Failed to connect to Let’s Encrypt, make sure the domain name is valid.
I also tried with
Domain name: keuken.smeurko.es
Alternative name: nas
this produced the same error.
My web server is (include version): Synology DS NAS
The operating system my web server runs on is (include version): DSM 6.2.2-24922 (latest update)
My hosting provider, if applicable, is:
Greenhost (just for registering the domain)
I can login to a root shell on my machine (yes or no, or I don’t know):
no
I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
Yes, DSM UI
OK, that is weird... What can I best do to solve this?
Sadly I do not have shell access (the NAS is in a different location, and I did not set up portforwarding in that location for port 22 and I can't access the router from where I am to change that...)
Also; the weirdest part is that i want to renew a cert. This has worked in the past. and now doesn't...
Second idea - ignore it. Because checking that file in my browser there was an error message:
Sorry, the page you are looking for is not found.
That's the message with a http status 404 - Not Found, but the http status is 403. So it may not be a real problem.
I don't use DSM. But there are a lot of configuration options, so it's possible that outgoing connections are blocked.
No, that's not relevant. A change of the configuration is enough. Perhaps the internal DNS doesn't work, so your DSM doesn't find an ip address of Letsencrypt. But to check that you need a shell. Or another version of outgoing connections.
Perhaps try to update your DSM. If it is a DNS-problem, that may fail with the same error.
Email : Enter the email address used for certificate registration.
Which email would this be? Can it be any email, like my email on another domain? Or does it have to be the webmaster/admin email on the very domain I am trying to get a certificate for?
another thing... could it be linked to the fact that I enables HSTS in the past?
