In September I lost visibility of MyApps on LMS running on my Netgear
ReadyNAS 324, as did some other ReadyNAS users. 
It seemed to be based around the old version of SSL. I tried updating
the SSL version, and the certificate, and managed to lose all Internet
access and had to reinstall the OS.

Further research led me to this:
https://rnxtras.com/addons/letsencryptfix - and it finally fixes it,
after 5 months of searching.

Apparently, "on September 30, 2021 as planned, the LetsEncrypt DST Root
CA X3 cross-sign expired, and they now use their own ISRG Root X1 for
trust on almost all devices". As planned! Who planned that!

As 'whocares' says (the guy with the fix) says: 

"However, most of the certificates “in the wild” still contain a route
to the outdated certificate to support older Android devices where the
list of certificates is no longer getting updated. Unfortunately the
ReadyNAS is also still using the outdated certificates, mainly because
the ca-certificates package in the base OS wasn’t updated for ages. This
means that all tools that rely on certificate validation for SSL
connections are likely to fail when encountering a LetsEncrypt
certificate on the opposite side of the connection.

This add-on fixes the problem by installing an updated version of the
ca-certificates package (backported from the latest Debian release
“bullseye”) and updated curl- and openssl- libraries built with support
for the new certificate chains."

All beyond me, but it works. And no command lines at all, you just
download the fix program, upload it to the ReadyNAS, it runs - and then
after a reboot, My Apps reappear. The fix is free. I'm so happy I sent
him a donation...


------------------------------------------------------------------------
ncameron's Profile: http://forums.slimdevices.com/member.php?userid=19249
View this thread: http://forums.slimdevices.com/showthread.php?t=116255

_______________________________________________
Squeezecenter mailing list
[email protected]
http://lists.slimdevices.com/mailman/listinfo/squeezecenter

Reply via email to