Page 1 of 1

CloudSync auth certificate is invalid

Posted: 14 Jul 2025, 23:03
by xeph
When using the CloudSync app to authorize any of the providers listed (Google Drive, Box, Dropbox etc), the TerraMaster OAuth popup appears, but it does not load because of an invalid certificate issued by WebTitan Cloud. The error is: "WebTitan Cloud certificate is using a broken key size". This prevents authentication with the cloud service you want to connect to.

Please can someone from TerraMaster fix this.

Image

Re: CloudSync auth certificate is invalid

Posted: 15 Jul 2025, 07:28
by CursaYang
Please check if the SSL certificate has expired:viewtopic.php?t=6701

Re: CloudSync auth certificate is invalid

Posted: 15 Jul 2025, 15:18
by xeph
CursaYang wrote: 15 Jul 2025, 07:28 Please check if the SSL certificate has expired:viewtopic.php?t=6701
The certificate has not expired. The certificate itself is invalid. This is not the certificate of the NAS itself. It is the certificate for TerraMaster’s OAuth service.

Re: CloudSync auth certificate is invalid

Posted: 15 Jul 2025, 22:36
by xeph
MikeZhang wrote: 15 Jul 2025, 15:48
xeph wrote: 15 Jul 2025, 15:18
Please click "visit this website"
It's generally bad security practice to visit websites with invalid certificates though. Especially if it's going to ask me to login to my Google account.

Re: CloudSync auth certificate is invalid

Posted: 15 Jul 2025, 22:56
by TMzethar
We have informed the relevant project teams to investigate the related issues.

Re: CloudSync auth certificate is invalid

Posted: 15 Jul 2025, 23:04
by xeph
TMzethar wrote: 15 Jul 2025, 22:56 We have informed the relevant project teams to investigate the related issues.
Thank you @TMzethar!

Re: CloudSync auth certificate is invalid

Posted: 16 Jul 2025, 09:07
by EthanLiu
xeph wrote: 15 Jul 2025, 23:04
Thank you for your feedback! After testing in multiple environments in the laboratory, the certificate exception you described has not yet been reproduced. We have updated the TerraMaster OAuth certificate on June 7, 2025. According to analysis, this may be caused by the browser caching the old certificate data. It is recommended that you clear the browser cache before trying again.

Re: CloudSync auth certificate is invalid

Posted: 19 Jul 2025, 07:35
by xeph
EthanLiu wrote: 16 Jul 2025, 09:07
xeph wrote: 15 Jul 2025, 23:04
Thank you for your feedback! After testing in multiple environments in the laboratory, the certificate exception you described has not yet been reproduced. We have updated the TerraMaster OAuth certificate on June 7, 2025. According to analysis, this may be caused by the browser caching the old certificate data. It is recommended that you clear the browser cache before trying again.
Hi, I was finally able to test this again and the problem has been resolved. Thank you so much for taking the time to look into this!