My QNAP is TS-239, found that the OPENVPN certificate is only valid for 10 years and will expire in 2023

Hi Yzgolden,

Hello, after internal team testing, please follow the steps below.

  1. Log in to the NAS via SSH using the admin account.
  2. Execute the following commands
export VPN_EASY_RSA="/etc/openvpn/easy-rsa"
export VPN_KEY_PATH="/etc/openvpn/keys"
export EASY_RSA="${VPN_EASY_RSA}"
export OPENSSL="/usr/bin/openssl"
export PKCS11TOOL="pkcs11-tool"
export GREP="/bin/grep"
export KEY_CONFIG=$(${VPN_EASY_RSA}/whichopensslcnf ${VPN_EASY_RSA})
export KEY_DIR="${VPN_KEY_PATH}"
export PKCS11_MODULE_PATH="dummy"
export PKCS11_PIN="dummy"
export KEY_SIZE=1024
export CA_EXPIRE=3650
export KEY_EXPIRE=3650
export KEY_COUNTRY="TW"
export KEY_PROVINCE="Taiwan"
export KEY_CITY="Taipei"
export KEY_ORG="QNAP Systems Inc."
export KEY_EMAIL="admin@qnap.com"
export KEY_CN="TS Series NAS"
export KEY_NAME="NAS"
export KEY_OU="NAS"
export PKCS11_MODULE_PATH=changeme
export PKCS11_PIN=1234

/etc/openvpn/easy-rsa/clean-all
/etc/openvpn/easy-rsa/build-dh
/etc/openvpn/easy-rsa/pkitool --initca
/etc/openvpn/easy-rsa/pkitool --server myserver
  1. Go to the OpenVPN page and disable > apply > enable > apply.
  2. Re-download the certificate.

This should update the certificate date. Please try it out, thank you.

1 Like