Page 4 of 4
Re: How to update an expired SSL certificate?
Posted: 05 Apr 2026, 10:33
by pennypacker
TMzethar wrote: ↑04 Apr 2026, 14:10
Hi.
Based on the images you provided, it appears you are using TOS5. In TOS5, you can usually update your eu.tnas.link automatically by simply disabling and then re-enabling the TNAS.online service.
Detailed instructions for this method are available on the first page of this thread.
"(2)If your system version is TOS 4 (excluding models F2-210 and F4-210) or TOS 5, you can update the certificate by restarting the TNAS.online service, provided that the network connection is normal. If the TNAS.online restart is unsuccessful, restarting the entire TNAS device will also complete the certificate update process."
Yes, TOS 5. The instructions worked, thanks.
Re: How to update an expired SSL certificate?
Posted: 26 Apr 2026, 04:39
by macmpi
TOS 4.2.44 on F2-210 (ARM)
Code: Select all
$ sudo docker pull ghcr.io/tailscale/tailscale:stable
Password:
stable: Pulling from tailscale/tailscale
d741ee1608f3: Already exists
c2d5824efcb8: Retrying in 1 second
7f75f7be1c9d: Retrying in 1 second
c4122d13ac3f: Retrying in 1 second
f1878199be32: Waiting
error pulling image configuration: download failed after attempts=6: x509: certificate signed by unknown authority
Did the TNAS.online start (and stop) and restarted NAS
Thanks for suggestion to fix x509 certificate for docker.
Re: How to update an expired SSL certificate?
Posted: 26 Apr 2026, 11:30
by EriChan
Please refer to this guide to update your expired certificate first, and then try again.
Re: How to update an expired SSL certificate?
Posted: 26 Apr 2026, 17:05
by macmpi
EriChan wrote: ↑26 Apr 2026, 11:30
Please refer to this guide to update your expired certificate first, and then try again.
I think you mean first post: yes I did that too (BTW, it misses one step to
chmod +x downloaded script):
However, even after restart, it does not solve the
docker pull error about
x509 certificate signed by unknown authority...
(BTW, when logging-into NAS interface from recent Firefox with https, Firefox also complain and have to acknowledge security risks...)
Thanks for any tip to allow successful
docker pull with no x509 cert error. (seem
this older issue it popping-up again, even with so-called latest docker version)
Re: How to update an expired SSL certificate?
Posted: 27 Apr 2026, 15:40
by Felix
Please follow the steps below. I have included instructions to backup your original file and a method to restore it later.
Backup the Original File
Before modifying system files, always create a backup:
Code: Select all
sudo cp /etc/docker/daemon.json /etc/docker/daemon.json.bak
Edit the Configuration
Open the configuration file using your preferred editor:
Update the file with the following content to configure the registry mirror and allow insecure connections for ghcr.io:
Code: Select all
{
"registry-mirrors": [
"https://docker.ketches.cn/"
],
"insecure-registries": [
"ghcr.io"
]
}
Restart Docker
Restart the service to apply the new settings:
How to Restore Original Configuration
Since adding entries to insecure-registries lowers security by allowing unverified connections, it is recommended to revert the changes after you have finished pulling images.
To restore your original settings:
Stop Docker
Restore the backup
Code: Select all
sudo mv /etc/docker/daemon.json.bak /etc/docker/daemon.json
Start Docker
Re: How to update an expired SSL certificate?
Posted: 27 Apr 2026, 16:58
by macmpi
Felix wrote: ↑27 Apr 2026, 15:40
Please follow the steps below. I have included instructions to backup your original file and a method to restore it later.
Thanks a lot for the useful workaround: works fine.
Now, is there a possibility TM would ship an
updated docker app for TOS 4.2.44 / F2-210, so that we avoid such (even transitional) unsecure setup?
Thanks for consideration.
PS:
Code: Select all
$ sudo systemctl restart docker
sudo: systemctl: command not found
Re: How to update an expired SSL certificate?
Posted: 27 Apr 2026, 17:09
by Felix
macmpi wrote: ↑27 Apr 2026, 16:58
Felix wrote: ↑27 Apr 2026, 15:40
Please follow the steps below. I have included instructions to backup your original file and a method to restore it later.
Thanks a lot for the useful workaround: works fine.
Now, is there a possibility TM would ship an
updated docker app for TOS 4.2.44 / F2-210, so that we avoid such (even transitional) unsecure setup?
Thanks for consideration.
PS:
Code: Select all
$ sudo systemctl restart docker
sudo: systemctl: command not found
The 210 series are early ARM products. Due to incomplete Docker support for the ARM architecture and architectural limitations in the early days, they could not be upgraded to newer versions.
Thank you for pointing this out; the relevant commands have been updated.
Re: How to update an expired SSL certificate?
Posted: 02 Jul 2026, 18:05
by itectric
this is not working for me. the commands sudo -i doesnt work. I am in an admin cmd window
Re: How to update an expired SSL certificate?
Posted: 03 Jul 2026, 04:40
by EriChan
Great to know our live support team got this sorted out for you!
You only need to update according to solution 1 for your situation.
Thank you for reaching out, and feel free to contact us know if you need any further assistance。