QNAP myQNAPcloud SSL Certificate

[pleasehelp 0]

Can I use my QNAP myQNAPcloud SSL Certificate for emby remote connection?  It is direct from QNAP and not a LetsEncrypt certificate.

External domain: https://XXXXXXX.myqnapcloud.com

Custom ssl certificate path: ???

The problem is that I cannot select a PKCS #12 file for the “Custom ssl certificate path” entry.

QNAP: “The license for myQNAPcloud SSL certificate does not allow you to export the certificate or keys from the QNAP NAS”

 

[Luke 40082]

Hi, so you're saying you don't have direct access to the certificate file?

[pleasehelp 0]

I think so, because I didn't find it in the NAS file system, the "Download Certificate" button is gone and the QNAP statement above.

[Luke 40082]

@@PenkethBoy do you see this as well?

[PenkethBoy 2066]

i dont use myQnapCloud - but it is i think a closed system provided by QNAP for external access of your NAS

 

so not surprised its not a "standard" certificate

 

it will be on the system somewhere as updates involve a download - not looked for it on my system

[Luke 40082]

Ok we'll need to research this. Thanks for the info.

[jillybean 2]

I think so, because I didn't find it in the NAS file system, the "Download Certificate" button is gone and the QNAP statement above.

https://emby.media/community/index.php?/topic/67479-how-to-connect-emby-through-qnap-letsencrypt-certificate/ 

 

See if this thread helps.  It is about a letsencrypt cert but maybe the location and info about needing to create the pkcs file also applies to the qnap cert.

[pleasehelp 0]

I was just able to return the certificate and have now received my money back. So I can't try that. I will now get a LetsEncrypt certificate.

 

Many thanks for your help!

[Luke 40082]

Thanks for the feedback.

[grudi 5]

You can use the myQNAPcloud SSL Certificate for emby remote connection. 

 

You will find it in /etc/config/QcloudSSLCertificate/cert on your QNAP NAS

 

Convert the QNAP certificate with the following command to a  PKCS #12 file:

 

openssl pkcs12 -export -out emby.p12 -inkey key -in cert

 

reference the emby.p12 file in your server setup:

 

/etc/config/QcloudSSLCertificate/cert/emby.p12

 

enter the password that you assigned during the conversion of the certificate into the respective field.

[Beebo 4]

Just a quick shoutout to grudi for his neat tutorial. Worked perfectly, and Emby is accessible via https. Nice!!

 

[MattArnolds 0]

It's good that you got your money back, because now there are a lot of scammers. I was lucky enough to choose a company that would not scam me when I need help for getting my certificate. I was not sure which one to choose, and later I found out that my friend got scammed by the one I did not choose. My choice was https://www.spoto.info/pmi-dumps, and I am really glad that I have made it. They have helped me a lot, and to be honest, I would not be able to do it without them.

Edited January 17, 2021 by MattArnolds

[schogobong 3]

I followed the steps posted by @grudi but somehow, emby doesn't seem to recognize this.

My setup/steps:

• I have a ssl certificate from Let's Encrypt (using the QTS SSL Certificate in the myQNAPcloud settings)
• I SSHd into my NAS using Git Bash and ran the code provided by grudi
• I set a password
• I pasted this path into the Custom ssl certificate path in emby: /etc/config/QcloudSSLCertificate/cert/emby.p12
• I entered the certificate password that I set via the terminal
• I saved and, as prompted, restarted my emby server
• I forwarded port 8920 TCP on my router

The dashboard still says "running on http port 8096", no mention of https. And when opening https://nas-name.myqnapcloud.com:8920/ in my browser, I get an error saying that the site can't be reached.

 

 

Any idea why this isn't working? Maybe also from @Beebo, who seems to have gotten this to work?

 

[Luke 40082]

On 3/7/2021 at 11:40 AM, schogobong said:

I followed the steps posted by @grudi but somehow, emby doesn't seem to recognize this.

My setup/steps:

• I have a ssl certificate from Let's Encrypt (using the QTS SSL Certificate in the myQNAPcloud settings)
• I SSHd into my NAS using Git Bash and ran the code provided by grudi
• I set a password
• I pasted this path into the Custom ssl certificate path in emby: /etc/config/QcloudSSLCertificate/cert/emby.p12
• I entered the certificate password that I set via the terminal
• I saved and, as prompted, restarted my emby server
• I forwarded port 8920 TCP on my router

The dashboard still says "running on http port 8096", no mention of https. And when opening https://nas-name.myqnapcloud.com:8920/ in my browser, I get an error saying that the site can't be reached.

 

 

Any idea why this isn't working? Maybe also from @Beebo, who seems to have gotten this to work?

 

Hi, please attach the emby server log and that will help us see why your certificate was not loaded. thanks.

[schogobong 3]

It seems that this just took a bit to actually be displayed properly. It is now running on http 8096 and https 8920.

 

But seeing as QNAP automatically renews the Let's Encrypt certificate and I had to manually run the pksc12 export: Is there a way to automatically re-export the pksc12 file whenever the certificate get's updated or is that not necessary?

[Luke 40082]

On 3/18/2021 at 6:13 AM, schogobong said:

It seems that this just took a bit to actually be displayed properly. It is now running on http 8096 and https 8920.

 

But seeing as QNAP automatically renews the Let's Encrypt certificate and I had to manually run the pksc12 export: Is there a way to automatically re-export the pksc12 file whenever the certificate get's updated or is that not necessary?

Hi, it is necessary, and I would imagine you could create a cron job to do it.

[schogobong 3]

Allright, I will look into that - thanks @Luke!