Upgrade TLS for OS6 for Syncthing

[RaedyNas]

ReadyNas Pro 6 with OS6

I'm running syncthing that is requesting that my TLS version is outdated and is rejecting connections. Syncthing has the option to allow older version TLS but doesn't look like that is working.

How would I go about upgrading TLS (or is it Apache?) to keep working with new software updates?

[Sandshark · Accepted solution]

OS6.10.9 includes OpenSSL 1.0.1t 3 May 2016, which does not include SSL1.3.  I was able to successfully install OpenSSL 1.1.0l 10 Sep 2019 on a ReadyNAS virtual machine, but AFAIK that's the last one available for Jessie and it doesn't include support for TLS1.3.  You need 1.1.1 for TLS1.3.  I've also not done a thorough test, just verified it doesn't break the admin interface.

[AnishaA]

And welcome to the NETGEAR Community! 🙂

What is the current TLS version you are been using? 

Syncthing by default allows only TLS 1.3 or higher for sync connections.

If it is below that I suggest you try updating the version and check for the accessibility.

To update the TLS version please find the steps below.

Under TLS Versions, you will see the TLS protocol version(s) currently selected. T

o update the protocol, simply click edit. Next, choose your desired protocol based on your requirements and hit Save Changes.

Please note that you can not disable TLS v1.

Have a lovely day, 
Anisha A
Netgear Team 

[StephenB]

---

@AnishaA wrote:

To update the TLS version please find the steps below.

---

Can you kindly clarify what file you are suggesting @RaedyNas should edit?

Also, I am not sure whether you are suggesting that package(s) also need to be updated (or not).  If you are suggesting that, can you give more details on which packages?

[Sandshark · Accepted solution]

OS6.10.9 includes OpenSSL 1.0.1t 3 May 2016, which does not include SSL1.3.  I was able to successfully install OpenSSL 1.1.0l 10 Sep 2019 on a ReadyNAS virtual machine, but AFAIK that's the last one available for Jessie and it doesn't include support for TLS1.3.  You need 1.1.1 for TLS1.3.  I've also not done a thorough test, just verified it doesn't break the admin interface.

[RaedyNas]

Thanks Sandshark ! That is what I was looking for.

For syncthing it looks like it needed a system restart versus just a software restart to support the older TLS via the backwards compatible software option.