ASUSTOR Certificate Warnings

Support
1

Hi!
NAS Asustor AT10002T v2 ADM 3.4.6.RCO3
Duplicati 2.0.4.5
Mono 5.18.1.0.r1

Every time after backup I get a warning 2020-01-13 10:13:43 +03 - [Warning-Duplicati.Library.Modules.Builtin.CheckMonoSSL-MissingCerts]: No certificates found, you can install some with one of these commands: cert-sync /etc/ssl/certs/ca-certificates.crt #for Debian based systems cert-sync /etc/pki/tls/certs/ca-bundle.crt #for RedHat derivatives curl -O https://curl.haxx.se/ca/cacert.pem; cert-sync --user cacert.pem; rm cacert.pem #for MacOS Read more: http://www.mono-project.com/docs/about-mono/releases/3.12.0/#cert-sync ]

Perform actions as written here - https://github.com/duplicati/duplicati/wiki/SSL-TLS-support-in-Mono

sudo /usr/local/AppCentral/mono/bin/cert-sync /etc/ssl/certs/ca-certificates.crt

On Mono version 5.8.1.0.r6 the following command works:

sudo mono /usr/local/AppCentral/mono/lib/mono/4.5/cert-sync.exe /etc/ssl/certs/ca-certificates.crt

But nothing helps … Result of execution

mono TlsTest.exe --web https://github.com

FAILED: #-2146233079

System.Net.WebException: Error: SecureChannelFailure (Authentication failed, see inner exception.) —> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. —> System.DllNotFoundException: /volume1/.@plugins/AppCentral/mono/lib/…/lib/libmono-btls-shared.so

2

Welcome to the forum @RayW

TlsTest.exe is increasingly obsolete because it can’t do TLS past 1.0. Github seems to require TLS 1.2.

FAQ: Security has a more up-to-date (though less sophisticated) test, and also mentions mozroots.exe which I’m not sure you’ve tried. There are also some troubleshooting ideas, directly from Mono project.

I’m not sure where mono certificates live, but do you have anything in /etc/mono/certstore/certs folder?

3

Thanks for the answer!
I couldn’t use the mozroots or certmgr tools - I get the message: “file not found”. I don’t know very well * nix systems, maybe I’m doing something wrong …
Also I did not find the folder / etc / mono / certstore / certs.
I found a folder /etc/ssl/certs It contains files:

Blockquote
00673b5b.0@
02265526.0@
024dc131.0@
…
54.223.174.69:10090.pem
5443e9e3.0@
…
9f0f5fd6.0@
9f533518.0@
ACCVRAIZ1.pem@
ACEDICOM_Root.pem@
AC_Raíz_Certicámara_S.A…pem@
Actalis_Authentication_Root_CA.pem@
AddTrust_External_Root.pem@
AddTrust_Low-Value_Services_Root.pem@
AddTrust_Public_Services_Root.pem@
AddTrust_Qualified_Certificates_Root.pem@
AffirmTrust_Commercial.pem@
AffirmTrust_Networking.pem@
AffirmTrust_Premium.pem@
AffirmTrust_Premium_ECC.pem@
ApplicationCA_-Japanese_Government.pem@
Atos_TrustedRoot_2011.pem@
Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem@
Baltimore_CyberTrust_Root.pem@
Buypass_Class_2_CA_1.pem@
Buypass_Class_2_Root_CA.pem@
Buypass_Class_3_Root_CA.pem@
CA_Disig.pem@
CA_Disig_Root_R1.pem@
CA_Disig_Root_R2.pem@
CA_WoSign_ECC_Root.pem@
CFCA_EV_ROOT.pem@
CNNIC_ROOT.pem@
COMODO_Certification_Authority.pem@
COMODO_ECC_Certification_Authority.pem@
COMODO_RSA_Certification_Authority.pem@
Camerfirma_Chambers_of_Commerce_Root.pem@
Camerfirma_Global_Chambersign_Root.pem@
Certification_Authority_of_WoSign_G2.pem@
Certigna.pem@
Certinomis-Autorité_Racine.pem@
Certinomis-Root_CA.pem@
Certplus_Class_2_Primary_CA.pem@
Certum_Root_CA.pem@
Certum_Trusted_Network_CA.pem@
Chambers_of_Commerce_Root-2008.pem@
China_Internet_Network_Information_Center_EV_Certificates_Root.pem@
ComSign_CA.pem@
Comodo_AAA_Services_root.pem@
Comodo_Secure_Services_root.pem@
Comodo_Trusted_Services_root.pem@
Cybertrust_Global_Root.pem@
D-TRUST_Root_Class_3_CA_2_2009.pem@
D-TRUST_Root_Class_3_CA_2_EV_2009.pem@
DST_ACES_CA_X6.pem@
DST_Root_CA_X3.pem@
Deutsche_Telekom_Root_CA_2.pem@
DigiCert_Assured_ID_Root_CA.pem@
DigiCert_Assured_ID_Root_G2.pem@
DigiCert_Assured_ID_Root_G3.pem@
DigiCert_Global_Root_CA.pem@
DigiCert_Global_Root_G2.pem@
DigiCert_Global_Root_G3.pem@
DigiCert_High_Assurance_EV_Root_CA.pem@
DigiCert_Trusted_Root_G4.pem@
E-Tugra_Certification_Authority.pem@
EBG_Elektronik_Sertifika_Hizmet_Sağlayıcısı.pem@
EC-ACC.pem@
EE_Certification_Centre_Root_CA.pem@
Entrust.net_Premium_2048_Secure_Server_CA.pem@
Entrust_Root_Certification_Authority.pem@
Entrust_Root_Certification_Authority-EC1.pem@
Entrust_Root_Certification_Authority-G2.pem@
Equifax_Secure_CA.pem@
Equifax_Secure_Global_eBusiness_CA.pem@
Equifax_Secure_eBusiness_CA_1.pem@
GeoTrust_Global_CA.pem@
GeoTrust_Global_CA_2.pem@
GeoTrust_Primary_Certification_Authority.pem@
GeoTrust_Primary_Certification_Authority-G2.pem@
GeoTrust_Primary_Certification_Authority-G3.pem@
GeoTrust_Universal_CA.pem@
GeoTrust_Universal_CA_2.pem@
GlobalSign_ECC_Root_CA-R4.pem@
GlobalSign_ECC_Root_CA-R5.pem@
GlobalSign_Root_CA.pem@
GlobalSign_Root_CA-R2.pem@
GlobalSign_Root_CA-R3.pem@
Global_Chambersign_Root-2008.pem@
Go_Daddy_Class_2_CA.pem@
Go_Daddy_Root_Certificate_Authority-G2.pem@
Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem@
Hongkong_Post_Root_CA_1.pem@
IGC_A.pem@
…
ssl-cert-snakeoil.pem
thawte_Primary_Root_CA.pem@
thawte_Primary_Root_CA-G2.pem@
thawte_Primary_Root_CA-_G3.pem@

When executing a command

sudo /usr/local/AppCentral/mono/bin/cert-sync /etc/ssl/certs/ca-certificates.crt

I see some warnings

Blockquote
Warning: Could not import C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign
System.Security.Cryptography.CryptographicException: Unable to decode certificate. —> System.DllNotFoundException: /volume1/.@plugins/AppCentral/mono/lib/…/lib/libmono-btls-shared.so

I found a similar problem on the ASUSTOR forum - ASUSTOR Community Forum • View topic - Issue with Mono package 5.18.1.0.r1
I understand that the problem is in libmono-btls-shared.so ?