Problem setting up webdav

rocthered

Hi,

I was trying to set up syncing with my qnap NAS with webdav in Windows 10. While vertifying the server it said:

The certificate is not trusted because it is self-signed.
The certificate is not valid for the name rocsqnapnas.myqnapcloud.com.

Error code: SEC_ERROR_UNKNOWN_ISSUER

I searched and found it can be solved by copying a cert_override.txt file from firefox. But in firefox I found no cert_override.txt, only a cert9.

What shall I do?

Thanks,

DP

dstillman

If you are using a WebDAV server with a self-signed certificate, you can open the WebDAV URL in Firefox, accept the certificate, and then copy the cert_override.txt file from the Firefox profile directory to the Zotero profile directory.

You have to actually try to load the domain via HTTPS in Firefox and whitelist the certificate to create the cert_override.txt file in the Firefox profile directory.

rocthered

I think I did actually. This is how I did it:

1. Copy URL (https://DPsqnapnas.myqnapcloud.com/) to firefox and enter;
2. Some message came out warning about certificate, I clicked accept and was able to enter my nas homepage

Then I tried to look for the cert_override.txt in the firefox profile folder, but it itn't there. Is there any thing I did wrong?

dstillman

I'm a bit confused — what's the "DP" in that URL? That doesn't appear to be a valid domain (or at least doesn't resolve externally) and https://rocsqnapnas.myqnapcloud.com isn't self-signed. Are you editing something out, or is that a local-only address?

dstillman

I just tested in a new profile — Firefox 76 definitely still creates a cert_override.txt file in the profile directory when you whitelist a self-signed certificate. So it seems like you're either looking in the wrong directory or not whitelisting a self-signed certificate.

rocthered

Hi dstillman,

DP is my mistake. Used to use it but changed to roc.

Currently it is not self-signed because I found that qnap has an option to choose some certificate named "let's encrypt". I enabled it and it works now.
I tried several times before I used "let's encrypt", but I couldn't generate a cert_override.txt. One clue is every time I reopened firefox and tried to access the URL again, it asked again the certificate. So I guess there is still something wrong that firefox temporarily let me in but did not white-list the URL.

But anyway, "let's encrypt" wokrs for me and I don't need that file any more.
Thanks for your help!

dstillman

OK, yes, it's better to use Let's Encrypt anyway.

If you did need to solve this, resetting your Firefox profile might help, as might checking file permissions on the profile directory.