Workaround for ERR_SSL_VERSION_OR_CIPHER_MISMATCH problem for Sparc NAS (4.1.x firmware)

[TokyoQuaSaR]

I did use Firefox, set security.tls.version.min to 1, successfully accessed the dashboard, correctly downloaded the bin file you indicated (Apache2_2.2.34-arm-0.0.1.bin) and attempted to install it as an add-on but I get a pop-up message saying the installation failed. I tried several times after restarting the NAS but I get the same result every time.

[Weaverita]

This procedure is tricky.  While I can not tell you which step you are tripping up on, I went through this down-leveling procedure a few times before I got it right.  While not required, I used a dedicated and isolated client to manage this particular NAS unit.  You must follow every step exactly.  It does work.  Good luck. 

[TokyoQuaSaR]

Well I have 0 idea what I could have done wrong. It's not like there is any complex step I could have failed. And I tried several times, not sure what else I could try to be honest. I think I will keep with a temporary solution instead.

[StephenB]

---

@TokyoQuaSaR wrote:

I did use Firefox, set security.tls.version.min to 1, successfully accessed the dashboard, correctly downloaded the bin file you indicated (Apache2_2.2.34-arm-0.0.1.bin) and attempted to install it as an add-on but I get a pop-up message saying the installation failed. I tried several times after restarting the NAS but I get the same result every time.

---

Did you try connecting with TLS 1.2 (using chrome or edge)?  I believe there are a few cases where the installation appears to have failed, but in fact did not.

[TokyoQuaSaR]

OMG thanks ! That worked with Chrome ! Well I did get a security warning (about certificate) but I ignored it and it works fine. Thank you very much !

PS: I might got excited a bit too much, it does work with Chrome and Edge but in the URL box the "https" is strokethrough : https://<NAS_IP>
I'm not sure if it uses TLS 1.2 with a wrong certificate or if it skips encryption entirely, but since the NAS is used in my home LAN only I guess it's fine anyway.

PS2: I tried with Firefox with the "security.tls.version.min" setting reset to 3 and it works. I do get a certificate security warning that I need to ignore to be able to access the dashboard. But then it works fine.

PS3: checking the NAS log, it does say "Successfully installed Apache2 2.2.34" so I guess I should have checked that from the start... But well, if I get a pop-up message saying the install failed I tend to believe it..

[Sandshark]

The lined out https: is because of the self-signed certificate that Chrome has designated as "not secure".

[TokyoQuaSaR]

I also had to add in "windows features" : "SMB 1.0/CIFS File Sharing Support" > "SMB 1.0/CIFS-Client" as explained here and now it finally works again. Just to clarify, this NAS is at my wife's parents home and I had not checked it for a long time. Last time I did was probably when I installed 5.3 firmware, about 6 years ago. Now this works perfectly with their current PC (windows 11).

[StephenB]

---

@TokyoQuaSaR wrote:

I also had to add in "windows features" : "SMB 1.0/CIFS File Sharing Support" > "SMB 1.0/CIFS-Client" as explained here and now it finally works again. 

---

Yes, that is also needed with Windows 10 and 11.

While you are at it, I suggest downloading the log zip file, and looking there for any errors (particularly disk errors).

If they use the NAS for primary storage, they also should have a backup plan in place.  RAID isn't enough to keep data safe, and they are using a 12-14 year old NAS.  

[TokyoQuaSaR]

Thanks for the advice !
I actually checked the log and there are ATA errors from 1 of the 2 disks... Currently they kinda use it as a backup of their PCs and smartphones, at least sometimes they do, looks like they had not used it for a long time (the parents are not too young...). So I think it's fine to keep it like that. I set that up so that my wife receive an email when there is an error. I will probably change them the disk that is having errors soon though.