ThirdMirrors
/
acme.sh
mirror of https://gitee.com/Hawkin99/acme.sh.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

After installing the certificate to the _archive/<xx> folder and the reloading of nginx the certificate will not be used for system default yet as it is not copied to the /system/default folder yet. This workaround will copy it and change the DEFAULT and INFO files, this can maybe also be done by Bash but I do not know the commands.

m-boone 2018-10-10 16:51:51 +02:00
parent 9a2fb2c3ad
commit 0d004eaf04
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Synology-NAS-Guide.md

@ -57,8 +57,8 @@ Please note that this will replace your Synology NAS system default certificate
--reloadcmd "/usr/syno/sbin/synoservicectl --reload nginx" \
--dnssleep 20
Now you can check the DSM control panel - Security - Certificates to see the nominated certificate has been replaced by letsencrypt one. You can now configure to use this one as default and assign to specific services, like vpn, sftp, etc.
Now you can check the DSM control panel - Security - Certificates to see the nominated certificate has been replaced by letsencrypt one. You can now configure to use this one as default and assign to specific services, like vpn, sftp, etc.
If you see the Lets Encrypt certificate but it's not being used by DMS yet you will have to create a temporary self signed certificate, assign the "system default" service to it and after the webserver has restarted assign the "system default" back to the Lets Encrypt certificate. After the webservice has restarted DSM will be using the lets encrypt certificate.
## Configuring Certificate Renewal
To auto renew the certificates in the future, you need to configure the cronjob. However, acme.sh seems not properly add tasks to Synology crontab. You have to do this manually.