HTTPS interface and Microsoft Edge

Currently reading
HTTPS interface and Microsoft Edge

687
226
NAS
DS918+
Operating system
  1. macOS
Mobile operating system
  1. iOS
Is it just me, or....... but when I try to access the HTTPS UI logon page in Microsoft Edge the browser does not allow it to be viewed at all. I know other browsers say it is insecure but give you an option to proceed, it seems Edge (on Mac at least) doesn't.

If there is a work around I can't find it.....
 
Please don't tell me you have Edge on macOS? How come that Mac didn't stop all together :D.

Can't say for sure but there are browsers that will start to block https (insecure) access altogether. I know Chrome and FF have it in the pipeline, just not sure when and what version will roll that out, but I have read about it not so long ago.

So if you are actually trying to access a site via https but don't have a valid cert, that will soon have to change or you will have to use http.
 
What are you using to connection: IP address; QuickConnect; Synology domain; personal domain. Is your SSL certificate self-signed or LE signed for the FQDN you're using?

Last Microsoft browser I used on Mac was Internet Explorer on OS X 10.2 (Jaguar, pronounced Jagwire by Steve Jobs) ... that was before Safari came along and Firefox too.

I avoid Edge on work's Windows 10 opting instead for Firefox and, when pressed, IE 11.
 
LOL as an ex-MVP for Microsoft I do like to try things. My default MacOS browser is Brave.

Connection is via IP address and the cert is the Synology LE (signed I think) one, the one used for DDNS.

So it looks like I need to turn off HTTPS or buy a real cert?
 
My default MacOS browser is Brave
nice!

So it looks like I need to turn off HTTPS or buy a real cert?
that's it. The built-in one, is a self-signed cert. No way you will be able to use that one with any https (public) services without a warning.
 
Any cheap suppliers you can recommend?
Well there is a built-in option to get a free Let'sEncrypt one. They last for 90 days and can be renewed. You can map that cert to your ddns name. The question now is whats the number of services you expect to run under that cert and if there are multiple, will you be using subdomain.domain names. If so then you will have to use SAN fields when registering that cert with LE.

Another option is to get a commercial SSL from any number of CA out there, but I don't use them (running LE wild card version myself) so I can't say really.
 
Argh... not having a lot of luck today!

Screenshot 2020-05-22 at 15.06.03.png


Hmm and I might have to look at hoe you get a wildcard cert myself...
 
DSM 6.2.3 supports wildcard LE certs on the yourNAS.synology.me domain, otherwise @Rusty has the deets on sorting out wildcard LE certs for private domains ... via Docker container. Check out the Resources section.

Otherwise you can do what I do and use multiple LE certs managed (renewed) by DSM and use the subject alternative name to secure other FQDN than the cert's domain name.

I'm using a private domain and run DNS server on DSM to server LAN name resolution, and it then forward other domains to OpenDNS (or whatever Internet DNS service you'd like). My DDNS provider for the private domain points pretty much everything to my router's Internet IP. In theory the router should loopback Internet resolved DNS to the local devices (care of the port forwarding rules) but I've a bad memory so I add LAN-only entries to my DNS server (and reserve the DHCP client IPs) ... rpi, nas, mac-mini etc. etc.

Oh yeah, I don't allow Internet inbound access to my DNS server :) purely an home service.
 
Okay I'll stop there .... ports are open and still no luck. It works with HTPS and Brave so I'll stick with it for now. I'n not going to go down the Docker route or get into reverse proxies. This'd involve extra cost for a proper DDNBS service as I don't have a static IP provided by my ISP.
 
...as I don't have a static IP provided by my ISP.
Neither do I.

Various options out there but I stopped looking when I found Namecheap could have my private domain transferred to its nameservers. The downside is DSM doesn't support Namecheap directly so I use OpenDNS's dns-o-matic service (supported by SRM and DSM) to keep both my OpenDNS account and Namecheap IP up to date.

All free except the private domain (something like £10 a year).
 
Hmm interesting. At the moment my domain is hosted via Easily and I have them set to use Office 365 to host the nameservers. I have control of those so I can add any records I need on to the domain. So how does it work, you set a record on the domain to point to OpenDNS's dns-o-matic service and the 'logon' for that is configured in the DSM system? Or is it more complex than that?
 
Last edited:
Namecheap supports DDNS for the domain I have there. Actually I can have a subdomain set for DDNS and not the main domain itself.

DSM DDSN agent will connect to dns-o-matic with my current/updated Internet IP. Dns-o-matic with then update the DDNS services that I have added to it: Namecheap and OpenDNS.

My domain is provided by Fasthosts and I just changed the nameservers there to be Namecheap's (also transferred them into an account I created there). So if your DNS service provider supports DDNS and you can confirm either direct from DSM or via dns-o-matic then you can use your own domain as a DDNS, for no cash.

I have three personal domains but could do this easily with two. My main domain haas been my hosted email domain for decades and has a small, pretty dormant website. My other 'name' domain is the one I use with Namecheap and direct to home (it's the one I also use with the DSM DNS server for private LAN devices). The last domain is fairly redundant but gets used for my VPN Plus service, I may lapse it.

Dns-o-matic is a service provided by OpenDNS, and OpenDNS is now owned by Cisco. It's been free for years.
 
Is this new Chromium-based Edge, or flaky OG Edge?

I'd heard only good things about the former, especially it being better on power usage compared to Google Chrome.

Vivaldi is another good alternative browser - less of Brave's extra malarky, all of the compatibility (that's my non-Safari go-to browser).
 
@fredbert - right understood, again added to my future investigation list.

@itsjasper - the new Chromium based Edge browser. It is improving nicely but still has a way to go. Brave it still my favourite. Vivaldi would be my main choice (as an ex-IT admin) but alas on MacOS it has a nasty bug where it can't play back MP4 videos without corrupting the display. It's ben there a long time with no fix in sight which renders it useless for me.
 
Brave drives me nuts as it is always complaining about developer mode extensions, and it never remembers which sites I allow javascript on, so I'm always having to run that off per tab.

Maybe I'm misusing it. I wanted to like it, and get away from all the metadata collection of Google and Microsoft. I gave up too on Firefox, never finding the combinations of extensions I needed and dealing with their forced extensions (ex. Pocket). O for Netscape Navigator I long for. So Edge Chrome for now (and what a poor extension store... few choices, and seldom updated).

/soapbox
 
Hmm I don't use developer mode extensions at all so no such problems for me with Brave.

Firefox I agree 100%.

@Telos Erm Edge can run all Google extensions with no problems at all.
 

Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Similar threads

  • Question
Ok, changing the ports didn't help. I refreshed the Synology / LE certificate too but that didn't seem to...
Replies
4
Views
2,513

Welcome to SynoForum.com!

SynoForum.com is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!

Back
Top