Dynamic DNS / SSL / Synology NAS

[simistef]

Hi there,

Purchased a domain that uses CPanel 104.0.10. I am having a Synology NAS where i run several services that i would like to access from WEB. Since i do not have a fixed IP, i can only access trough a Dynamic DNS name. Therefore in cPanel i have been given the option to create basically a subdomain.

All good so far except the SSL part which gives me headaches. A Personal SSL private and cert keys have been generated, which i copied in my Synology NAS as well.

However when i access this subdomain, i receive the message of connection to the site via https being not secure. For some streaming services, the stream will not even play.

Any idea how can i fix this? Really new so thanks in advance for patience.

 

[cPRex]

Hey there! I don't have any experience with the Synology side of things, so this question may actually be better for them. I can confirm that cPanel, by default, issues free SSL certificates for all domains on a server unless your hosting provider has disabled this feature. If that is in place, I would expect the SSL connection to be working well on the cPanel side of things. You would be able to confirm this in the cPanel >> SSL/TLS Status, as that will show if there is an active SSL on the cPanel side.

If so, you'll want to talk to Synology as the issue most likely is with that connection.

 

[simistef]

Thanks for your answer. Indeed, cPanel issues a certificate for Dynamic DNS subdomain, but it is self signed, and i get this message. By copying cert and private key towards my Synology NAS, i only move this further basically, because this is the exact error Chrome is giving me. Self-Signed certificate are not trusted

 

[cPRex]

Ah, now I think we're getting somewhere, as I'd expect that to be secured with a normal SSL. Could you create a ticket with our team so we can see why that isn't happening? It should be performing DNS verification on that domain to get the SSL issued.

 

[simistef]

Not sure how i can do this or if have the option to do this. My domain is hosted by an external provider which gave me access to Cpanel with a specific user. I don't have the root user for being able to raise a ticket support. Am i right ?

 

[cPRex]

Without root access you would need to reach out to the hosting provider or datacenter to have them check this issue.

 

[simistef]

i did before posting here and told me that dynamic dns domains will always generate self-signed certificates. Although, initially, worked fine and only suddenly failed to work. redone the dynamic dns, and bam, getting only self signed certificate. is this a rule set by my provider suddenly ?

 

[cPRex]

This isn't a setting that your host would control, but we wouldn't be able to check things on our end without root access.