HTTPS and certificate errors

Fix certificate problems when connecting to a Synology NAS through an HTTPS domain.

An HTTPS connection requires a valid certificate, a hostname that matches the certificate, and a certificate chain trusted by the Apple device.

Check in order

  1. Confirm that the Swads host exactly matches a name covered by the certificate.
  2. Confirm the certificate is not expired and the NAS date and time are correct.
  3. In DSM, confirm the certificate is assigned to DSM or the relevant reverse proxy entry.
  4. Confirm the certificate chain is complete and trusted by the iPhone or Mac.
  5. Check the HTTPS port. DSM uses 5001 by default, while a reverse proxy may use another port.

Certificate mismatch with an IP address

Certificates often do not include a NAS IP address. Use the domain covered by the certificate, or follow the HTTP and HTTPS requirements for allowed address types on a trusted local network.

Self-signed certificates

If the system does not trust a self-signed certificate, Swads receives a secure connection validation error. Install and trust the corresponding root certificate correctly on the device, or configure a certificate issued by a trusted authority. Do not work around the problem by disabling security validation.

On this page

Check in orderCertificate mismatch with an IP addressSelf-signed certificates