How to support https for local intranet access?

I know this NAS supports https to access the Dashboard, but how to you set it up to support https requests for a share?

Apple, in their infinite wisdom, is now requiring that all iOS devices connect to any server only via https (not http). That typically involves installing a certificate on the server, but I think that’s just for web servers, right?

I’m writing an app that plays media from NAS devices like this on your local network. But it’s going through apache on a Mac (Apple’s built-in but dormant Personal Web Server feature) to access files on the NAS as http URLs.

Does that mean I have to configure my Mac differently, or something on the WD My Cloud?

Looks like this has to be set up on the web server, which in my case is my Mac. I had partial success doing this tonight, but my confusion came from the notion that the My Cloud seemed capable of being a web server on its own. :slight_smile:

I’m glad this has been sorted out.

I have the same problem, but in Windows 10. When I access My Cloud EX2 Ultra on my home network, Chrome complains that the http: is not secure with the message “Your connection is not private”. There is an advanced button shown that lets me log onto the NAS, but with an http connection. Is https supported?

For those who search the same info: SSL is enabled - but with a certificate that has a name which is certainly not the FQDN of your NAS (in my case device6065799-6c6ce6c5.wd2go.com).

This cert is stored somewhere on the NAS (connect with SSH and find the files names server.crt then with openssl check which one is the right one - for example, could be /var/www/rest-api/config/server.key)

Once located, built a local CA (once again openssl is the best tool to learn) and create a certificate with a CN that correspond to you NAS FQDN - if needed add the IP in the subject alternate names. Import the ROOT CA (and any intermediate CA you could have created) into your truststore (operating system or browser).

Then replace the server.key and server.crt with these ones, sighup the apache processes and retry.

A rewrite / redirect should also be added to the apache config to send all HTTP queries to HTTPS virtual host.

I used this method to change the default certs and have something the browser accepts - and I can trust (as long as my CA is not hacked).

Cheers!

A/A