Safari and internal ip addresses

Software
1

I have a synology NAS running on the network. Sometimes I have to check something in the management interface for the NAS, and will have to access the https://[ip address here]:[portnr] to get there.

problem is that safari will start to warn me about a potentially unsafe connection (not private etc.)
it will then let me add the page as an exception
but then immediately start to warn me again bout a potentially unsafe connection (not private etc.)

[insert endless repeat here]

does anyone know how to fix this?

2

It depends on how your Synology is configured. Your system can be configured to trust the Synology’s untrusted certificate.

My Synology can be reached via https://[IP ADRESS]:5001. 5001 is the standard port for local encrypted access to a Synology NAS. This can be changed manually. Accessing the Synology via the wrong port using SSL will fail.

When this page is being accessed for the first time, Safari will prompt you with (everything is translated from German, so it might be slightly different in English):

This connection is not private.

This website potentially pretends to be [IP ADRESS] in order to steal your personal or financial information. Return to the previous page.

Beneath this message you can find this information:

If you are aware of the risks, you can open this website.

You can click on “open this website”.

Now a new message occurs:

Do you really want to open this website over a non-private connection?

You can click on “visit website”.

Now you get a new prompt:

You are changing the system settings for trusted certificates. (…) Enter your password".

After entering your password, you can click on “Update settings”.

After that, you will always be able to visit https://[IP ADRESS]:5001 without further warnings.

A different approach would be to access your Synology from outside of your network. There are several options. The one I use is Quick Connect. Quick Connect uses validated LetsEncrypt certificates to provide access to your NAS and it can be set up easily. The disadvantage: this is a way to access your Synology from the internet. I need this access from everywhere, so I am fine with that. Just make sure that your Synology is secure if you enable internet access. You can check your NAS’ security using the Security Advisor. I recommend following their recommended actions if possible and you will have quite a secure experience using the NAS from anywhere.

3

You have to generate a self signed cert and add it to the keychain. This link has a good explanation.
Alternatively you can use Google Chrome or Firefox.

4

That is what it should do indeed, problem is for me it doesn’t and I end up in an endless cycle

5

I have a self signed cert, so I’ll see if I can use the info from the article! Thanks!
will update once I’ve tried.