Fix for the “LetsEncrypt problem”

As you may know, one of the Root-CAs that are used by LetsEncrypt expired on September 30, 2021. Unfortunately this not only affects older browsers but also the ReadyNAS, mainly because the package ca-certificates of its underlying operating system never got updated and still uses the the expired Root-CA.

This affects all tools on the NAS that have to connect to external systems that use certificates from LetsEncrypt – and of course some add-ons like Nextcloud that regularly try to connect to external sites for updates.

To fix the problem I backported the ca-certificates package from the current Debian distribution (“bullseye”) to the ReadyNAS. I also rebuilt the most affected tools like curl, wget, gnutls and openssl. The complete package is available as a free add-on:

To install, make sure your ReadyNAS has a working internet connection (check the DNS settings) and just upload as you would with a normal add-on.

Note: After installation the add-on will NOT show up in the list of installed add-ons. This is done on purpose to not clutter the interface. If in doubt just install again, no harm there.

If you find the add-on useful, please consider a donation: