Certificate installation

[catweazle71]

Hi,

I like to use an official SSL certificate to encrypt web sessions e.g. to DSM.

I even tried RapidSSL and Thawte, but had no luck. Thawte would work well if I had not to use an intermediate certificate from CA (in fact two CA's in a bundle crt-file).

Actually it seems that such a constellation is not installable on a Disk Station running DSM 4.0 beta, because I didn't find a way to install the chain file for the synology apps like file station. I integrated the chain file to httpd-conf files in /usr/syno/apache/conf/extra/httpd-ssl.conf-xxx

I didn't find a guide for this wherever I searched

Does anybody has an idea

[gangsterwagen]

viewtopic.php?f=36&t=21704

[wormoworm]

I followed this method yesterday and can confirm it works nicely (on DSM 4.0) The key you upload to the NAS must be the unencrypted one, and for StartSSL to accept your .csr file, it must be an RAS 2048-bit csr (I tried with 1024 and no luck).
The tricky part is actually validating your domain with StartSSL, as to validate a csr you must have a validated domain, which is done by them sending an email to an address at that domain. SO for me they wanted to send an email to webmaster@tohmomewood.co.uk in order to validate www.tomhomewood.co.uk.
Trouble is, I did't have this email address set up, but luckily my provider (123reg.co.uk) offer a 'catch-all' email forwarding service, which send emails onto another address. Once this was done everything else went fine

[gangsterwagen]

Yeah, it works, but when Synology positioning their product for small and medium business it should be user friendly tool to do it.

[szrobi]

I had no luck with cert.

1. Tried the method decriebed on the separate post (generate cert request) and non encrypted key + cert gave an error message that the cer does not belong to the key...
2. Tried the e2e StartSSL method (generating private key too on their front-end) .. well it caused DSM to crash fully (all web services: http, ftp, ssh etc..) twice, so had to reinstall the DSM. It accepted the key&cert pair though (crash came after "restarting web services" message).

[gangsterwagen]

I had no luck with cert.

1. Tried the method decriebed on the separate post (generate cert request) and non encrypted key + cert gave an error message that the cer does not belong to the key...
2. Tried the e2e StartSSL method (generating private key too on their front-end) .. well it caused DSM to crash fully (all web services: http, ftp, ssh etc..) twice, so had to reinstall the DSM. It accepted the key&cert pair though (crash came after "restarting web services" message).

I suppose that you are a serious person. You use Synology products to speed up your business, but you can't and waste time for stupid activity which should be done by the DSM