Mapping Network Drives over Internet with WebDAV

The discussion room of webDAV based solution for file sharing.
Forum rules
1) This is a user forum for Synology users to share experience/help out each other: if you need direct assistance from the Synology technical support team, please use the following form:

https://account.synology.com/support/su ... p?lang=enu



2) To avoid putting users' DiskStation at risk, please don't paste links to any patches provided by our Support team as we will systematically remove them. Our Support team will provide the correct patch for your DiskStation model.
User avatar
Shadow771
Sharp
Sharp
Posts: 189
Joined: Sun Jan 28, 2018 11:48 pm
Location: the Netherlands

Re: Mapping Network Drives over Internet with WebDAV

Unread post by Shadow771 » Wed May 16, 2018 12:48 pm

SergSlim wrote:
Wed May 16, 2018 12:27 pm
It asks for a certificate during connection.
And what happens if you just randomly choose one?
Synology DS216+II <--> Synology RT1900AC <--> <site-to-site VPN tunnel> <--> Synology RT1900AC <--> Synology DS118+

SergSlim
I'm New!
I'm New!
Posts: 7
Joined: Thu Jan 18, 2018 10:51 pm
Location: Ukraine, Lviv
Contact:

Re: Mapping Network Drives over Internet with WebDAV

Unread post by SergSlim » Wed May 16, 2018 1:13 pm

Shadow771 wrote:
Wed May 16, 2018 12:48 pm
SergSlim wrote:
Wed May 16, 2018 12:27 pm
It asks for a certificate during connection.
And what happens if you just randomly choose one?
Network logon failed

User avatar
Shadow771
Sharp
Sharp
Posts: 189
Joined: Sun Jan 28, 2018 11:48 pm
Location: the Netherlands

Re: Mapping Network Drives over Internet with WebDAV

Unread post by Shadow771 » Wed May 16, 2018 1:18 pm

Makes me wonder if you WebDav to http://yourname.synology.me:5005 instead of it then will work, just to confirm your port forwarding and the Webdav package on your NAS is working. But this is obviously unsecured, something I wouldn't like trying over the Internet...
Synology DS216+II <--> Synology RT1900AC <--> <site-to-site VPN tunnel> <--> Synology RT1900AC <--> Synology DS118+

SergSlim
I'm New!
I'm New!
Posts: 7
Joined: Thu Jan 18, 2018 10:51 pm
Location: Ukraine, Lviv
Contact:

Re: Mapping Network Drives over Internet with WebDAV

Unread post by SergSlim » Wed May 16, 2018 2:33 pm

Shadow771 wrote:
Wed May 16, 2018 1:18 pm
Makes me wonder if you WebDav to http://yourname.synology.me:5005 instead of it then will work, just to confirm your port forwarding and the Webdav package on your NAS is working. But this is obviously unsecured, something I wouldn't like trying over the Internet...
I thought that Router Configuration worked fine, but now I think that it did not.
I have a ASUS RT-AC88U, which is not in the list of routers for manual configuration yet.
Image

Though it was detected as compatible UPnP router.
Image
Strange thing is that sometimes it says that it could not find a compatible router.

And it was possible to set up port forwarding through NAS, and status showed OK.
Image
Another strange thing is that sometimes it would fail the test check.

However WebDAV with http and 5005 did not work. And on router's port forwarding page everything was empty. Not sure if it was supposed to have the same ports listed as in NAS Router Configuration page, though.
Image

I removed everything from Router Configuration tab and added few lines manually to my router.
Image

Now I was able to map a drive using http and port 5005. But https and 5006 still asks for a certificate.

User avatar
Shadow771
Sharp
Sharp
Posts: 189
Joined: Sun Jan 28, 2018 11:48 pm
Location: the Netherlands

Re: Mapping Network Drives over Internet with WebDAV

Unread post by Shadow771 » Wed May 16, 2018 3:15 pm

SergSlim wrote:
Wed May 16, 2018 2:33 pm
I removed everything from Router Configuration tab and added few lines manually to my router.


Now I was able to map a drive using http and port 5005.
I'd always advise manual port forward configuration instead of UPnP. I have even disabled UPnP om my routers for security reasons.
SergSlim wrote:
Wed May 16, 2018 2:33 pm
But https and 5006 still asks for a certificate.
For this you really need to get a valid SSL certificate installed on your NAS. Below description covers getting a free cert from "Let's Encrypt":
https://www.synology.com/en-global/know ... ertificate
Synology DS216+II <--> Synology RT1900AC <--> <site-to-site VPN tunnel> <--> Synology RT1900AC <--> Synology DS118+

SergSlim
I'm New!
I'm New!
Posts: 7
Joined: Thu Jan 18, 2018 10:51 pm
Location: Ukraine, Lviv
Contact:

Re: Mapping Network Drives over Internet with WebDAV

Unread post by SergSlim » Wed May 16, 2018 3:28 pm

Shadow771 wrote:
Wed May 16, 2018 3:15 pm
For this you really need to get a valid SSL certificate installed on your NAS. Below description covers getting a free cert from "Let's Encrypt":
https://www.synology.com/en-global/know ... ertificate
Yeah, but it requires to have a domain name, which I don't have:
"Domain name: Enter the domain you have registered from the domain provider."

pgotze
Experienced
Experienced
Posts: 112
Joined: Thu Oct 03, 2013 8:43 am

Re: Mapping Network Drives over Internet with WebDAV

Unread post by pgotze » Wed May 16, 2018 3:50 pm

I would use VPN instead of webdav. I guess webdav has problem with big files.
DS916+(8GB RAM, 3x2TB SHR, 1x1TB single) primary, DS213j(512MB RAM, 1x1 TB single, 1x 500GB single) off-site backup

User avatar
HarryPotter
Honorary Moderator
Honorary Moderator
Posts: 19339
Joined: Mon Oct 23, 2006 12:48 pm
Location: Switzerland

Re: Mapping Network Drives over Internet with WebDAV

Unread post by HarryPotter » Wed May 16, 2018 4:12 pm

Yes you have a domain for creating the cert: xxxx.synology.me
*Please do not Private Message me for support questions; leave it on the forum so all members can learn. Thanks!*

DS718+ / DSM 6.2-23511 / ST4000VN000-2AH166 / SA400S37120G SSD cache /16 GB RAM
DS415+ / DSM 6.2-23511

LMS 7.9.1-166, 2 Squeezebox 3 + Boom

APC Smart UPS SUA750i

SergSlim
I'm New!
I'm New!
Posts: 7
Joined: Thu Jan 18, 2018 10:51 pm
Location: Ukraine, Lviv
Contact:

Re: Mapping Network Drives over Internet with WebDAV

Unread post by SergSlim » Thu May 17, 2018 10:13 am

HarryPotter wrote:
Wed May 16, 2018 4:12 pm
Yes you have a domain for creating the cert: xxxx.synology.me
Ok, I thought about it.
However after creating this certificate and exporting it to import it to Windows - it downloads an archive with 3 *.pem files:
privkey.pem, chain.pem, cert.pem.

What do I do with them now?

User avatar
Shadow771
Sharp
Sharp
Posts: 189
Joined: Sun Jan 28, 2018 11:48 pm
Location: the Netherlands

Re: Mapping Network Drives over Internet with WebDAV

Unread post by Shadow771 » Thu May 17, 2018 11:46 am

SergSlim wrote:
Thu May 17, 2018 10:13 am
However after creating this certificate and exporting it to import it to Windows - it downloads an archive with 3 *.pem files:
privkey.pem, chain.pem, cert.pem.
You have to import them on the NAS. Not on your Windows client...
Synology DS216+II <--> Synology RT1900AC <--> <site-to-site VPN tunnel> <--> Synology RT1900AC <--> Synology DS118+

SergSlim
I'm New!
I'm New!
Posts: 7
Joined: Thu Jan 18, 2018 10:51 pm
Location: Ukraine, Lviv
Contact:

Re: Mapping Network Drives over Internet with WebDAV

Unread post by SergSlim » Thu May 17, 2018 12:15 pm

Shadow771 wrote:
Thu May 17, 2018 11:46 am
SergSlim wrote:
Thu May 17, 2018 10:13 am
However after creating this certificate and exporting it to import it to Windows - it downloads an archive with 3 *.pem files:
privkey.pem, chain.pem, cert.pem.
You have to import them on the NAS. Not on your Windows client...
Are you sure? First I exported them from NAS, and you say that I should import them back to NAS? What's the point? It just created another Certificate instance, basically duplicate of the one that I created using Let's Encrypt.

Anyway, after creating Let's Encrypt certificate, configuring it to be used as default and for all of the services - it started working fine in Windows without asking for certificate.
I think I tried all this yesterday, but it did not work for some reason. Probably skipped some step.

Thanks for your help!

User avatar
Shadow771
Sharp
Sharp
Posts: 189
Joined: Sun Jan 28, 2018 11:48 pm
Location: the Netherlands

Re: Mapping Network Drives over Internet with WebDAV

Unread post by Shadow771 » Thu May 17, 2018 1:05 pm

SergSlim wrote:
Thu May 17, 2018 12:15 pm
Are you sure? First I exported them from NAS, and you say that I should import them back to NAS? What's the point? It just created another Certificate instance, basically duplicate of the one that I created using Let's Encrypt.
Ok sorry, I have no experience using Let's Encrypt. Apparently it's auto imported, but importing into the clients shouldn't be necesarry.

I have my own wildcard certificate for my entire domain which I've manually imported in my NAS.

Image

I've never imported my cert on any client. The connection is always secure and there are no errors here.
Synology DS216+II <--> Synology RT1900AC <--> <site-to-site VPN tunnel> <--> Synology RT1900AC <--> Synology DS118+

User avatar
akahan
Distinguished
Distinguished
Posts: 817
Joined: Sat Jul 14, 2012 6:52 pm

Re: Mapping Network Drives over Internet with WebDAV

Unread post by akahan » Thu May 17, 2018 2:39 pm

A self signed certificate must be imported into the client. That’s the whole point of self-signed. No certificate authority stands behind it. You created it, so you tell each of your client machines, “I trust this certificate because I created it.”

A let’s encrypt certificate does not need to be imported into the clients because it’s not self-signed. There is a real certificate authority standing behind it.

User avatar
HarryPotter
Honorary Moderator
Honorary Moderator
Posts: 19339
Joined: Mon Oct 23, 2006 12:48 pm
Location: Switzerland

Re: Mapping Network Drives over Internet with WebDAV

Unread post by HarryPotter » Thu May 17, 2018 3:35 pm

I have never impoted anything to my Windows 10 clients. I setup a ddns, created a lets encrypt cert and connected as written before. No problems.
*Please do not Private Message me for support questions; leave it on the forum so all members can learn. Thanks!*

DS718+ / DSM 6.2-23511 / ST4000VN000-2AH166 / SA400S37120G SSD cache /16 GB RAM
DS415+ / DSM 6.2-23511

LMS 7.9.1-166, 2 Squeezebox 3 + Boom

APC Smart UPS SUA750i

User avatar
akahan
Distinguished
Distinguished
Posts: 817
Joined: Sat Jul 14, 2012 6:52 pm

Re: Mapping Network Drives over Internet with WebDAV

Unread post by akahan » Thu May 17, 2018 6:35 pm

Harry, couldn't agree more - using self-signed certs and importing them into client devices might have made sense for folks on a budget at a time when there were no free signed certificates, but now that Let's Encrypt hands out free signed certificates, I can't think of any reason to continue to use self-signed certs with all the importation hassles.

Post Reply

Return to “WebDAV”