Problem installing Java Installer on Synology NAS

Asbjørn · Post by **Asbjørn** » 15 Jan 2019, 21:24

I recently bought a Synology NAS DS 213. I have tried several times to install Java 8, so that I can use BubbleUpnP server on the NAS. Each time I try to install the Java 8 Installer from Rednoah I get this annoying error "Ups something went wrong". I read somewhere that it might help to change the DNS server to google DNS-servers, so I did both on my router and the NAS, but it didnt help.

Can someone please tell me what the problem might be and how I can fix it? I am a total newbie in this area btw.

Post by **rednoah** » 16 Jan 2019, 02:33

Can you log into the NAS via SSH to check the log file?

algundesconsiderado · Post by **algundesconsiderado** » 18 Apr 2019, 17:30

Hi,
I'm having the same issue as Asbjørn,
My log show the following:

Code: Select all

Hi,
I'm having the same issue as Asbjørn, 
My log show the following:

root@NickiMiNAS:~# cat /volume1/@appstore/java-8-installer/install-jdk.log
cat: /volume1/@appstore/java-8-installer/install-jdk.log: No such file or directory
root@NickiMiNAS:~# cat /volume1/@appstore/java-8-installer/install-jdk.log
Warning: Illegal date format for -z, --time-cond (and not a file name). 
Warning: Disabling time condition. See curl_getdate(3) for valid date syntax.
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   862  100   862    0     0    165      0  0:00:05  0:00:05 --:--:--   204
cmp: EOF on /volume1/@appstore/java-8-installer/get-java.sh.asc
[Thu Apr 18 19:11:58 CEST 2019] AUTO UPDATE
Warning: Illegal date format for -z, --time-cond (and not a file name). 
Warning: Disabling time condition. See curl_getdate(3) for valid date syntax.
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  2520  100  2520    0     0    474      0  0:00:05  0:00:05 --:--:--   760
gpg: keyring `/volume1/@appstore/java-8-installer/.gnupg/pubring.gpg' created
gpg: Signature made Wed Jan 16 09:50:29 2019 CET using RSA key ID 7C3C6A71
gpg: /volume1/@appstore/java-8-installer/.gnupg/trustdb.gpg: trustdb created
gpg: key 7C3C6A71 marked as ultimately trusted
gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: Good signature from "Reinhard Pointner <[email protected]>" [ultimate]
[GNUPG:] TRUST_ULTIMATE
Download http://download.oracle.com/otn-pub/java/jdk/8u201-b09/42970487e3af4f5aa5bca3f542482c60/jdk-8u201-linux-x64.tar.gz
curl: (22) The requested URL returned error: 404 Not Found
jdk-8u201-linux-x64.tar.gz: No such file or directory
Expected SHA256 checksum: cb700cc0ac3ddc728a567c350881ce7e25118eaf7ca97ca9705d4580c506e370
Actual SHA256 checksum: 
ERROR: SHA256 checksum mismatch
[Thu Apr 18 19:12:20 CEST 2019] Add environment variables to /etc/profile

I've tried to download it manually from https://www.oracle.com/technetwork/java ... 77648.html (and I got it!) but I don't know what to do after that or where to leave it.

Thank you!

Post by **rednoah** » 18 Apr 2019, 17:50

Oracle disabled downloads for the last free Java 8 packages, so the java installer package is broken for the foreseeable future.

You'll have to install java yourself now, which means you download it, extract it, and then link the java executable into the $PATH.

Predator2912 · Post by **Predator2912** » 19 Apr 2019, 18:18

Hi

Since your installer does not work anymore, I wanted to use the post to ask you which java package i have to download for my NAS system?

Java SE Development Kit 8u212
jdk-8u212-linux-x64.tar.gz

or

Java SE Development Kit 8u211
jdk-8u211-linux-x64.tar.gz

or wich one?

Code: Select all

filebot -script 'fn:sysinfo'

------------------------------------------

FileBot 4.8.5 (r6224)
JNA Native: 5.2.2
MediaInfo: 17.12
7-Zip-JBinding: 9.20
Chromaprint: fpcalc version 1.4.3
Extended Attributes: OK
Unicode Filesystem: OK
Script Bundle: 2019-04-09 (r559)
Groovy: 2.5.6
JRE: Java(TM) SE Runtime Environment 1.8.0_131
JVM: 64-bit Java HotSpot(TM) 64-Bit Server VM
CPU/MEM: 4 Core / 4 GB Max Memory / 20 MB Used Memory
OS: Linux (amd64)
HW: Linux MadM4x-NAS 3.10.105 #23824 SMP Tue Feb 12 16:50:45 CST 2019 x86_64 GNU/Linux synology_braswell_916+
DATA: /volume1/@appstore/filebot/data/admin
Package: SPK
License: FileBot License  (Valid-Until: 2019-09-24)
Done ヾ(＠⌒ー⌒＠)ノ
------------------------------------------

[Process completed]

Code: Select all

root@MadM4x-NAS:~# java -version
java version "1.8.0_131"
Java(TM) SE Runtime Environment (build 1.8.0_131-b11)
Java HotSpot(TM) 64-Bit Server VM (build 25.131-b11, mixed mode)
root@MadM4x-NAS:~#

Post by **rednoah** » 19 Apr 2019, 18:52

I have updated the java-installer package to install Java 12 builds from OpenJDK or Liberica. It's already in the package sources.

Experience may vary depending on your platform. Works on my aarch64 QNAP but crashes on my armv7l Synology DSM.

Predator2912 · Post by **Predator2912** » 20 Apr 2019, 19:29

Thank you.

I will test it as soon as I have the time.

xIntenso · Post by **xIntenso** » 21 Apr 2019, 11:28

I'm having this same issue, even with the new v1.9 isntaller.

My Logfile shows a SHA256 mismatch when trying to install:

Code: Select all

Warning: Illegal date format for -z, --time-cond (and not a file name). 
Warning: Disabling time condition. See curl_getdate(3) for valid date syntax.
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100   862  100   862    0     0   3701      0 --:--:-- --:--:-- --:--:--  3699
cmp: EOF on /volume1/@appstore/java-installer/get-java.sh.asc
Sun Apr 21 13:27:13 CEST 2019: AUTO UPDATE
Warning: Illegal date format for -z, --time-cond (and not a file name). 
Warning: Disabling time condition. See curl_getdate(3) for valid date syntax.
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100  3529  100  3529    0     0  15124      0 --:--:-- --:--:-- --:--:-- 15211
gpg: keyring `/volume1/@appstore/java-installer/.gnupg/pubring.gpg' created
gpg: Signature made Fri Apr 19 17:29:13 2019 CEST using RSA key ID 7C3C6A71
gpg: /volume1/@appstore/java-installer/.gnupg/trustdb.gpg: trustdb created
gpg: key 7C3C6A71 marked as ultimately trusted
gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: Good signature from "Reinhard Pointner <[email protected]>" [ultimate]
[GNUPG:] TRUST_ULTIMATE
Download https://download.bell-sw.com/java/12.0.1/bellsoft-jdk12.0.1-linux-aarch64.tar.gz
Expected SHA256 checksum: 7dade4567a8a518e9d477e24256421293c48dfa47e9940b9788416f55b1baa84
Actual SHA256 checksum: 037177804b80177edcbab30c5612f0fc13e611f6d9287642c831f00b9b7fe188
ERROR: SHA256 checksum mismatch

My system is aarch64, a DS218play.

xIntenso · Post by **xIntenso** » 21 Apr 2019, 11:54

I've got it working using a temporary hack.

Step 1: Try to install the Java Installer package from the package center and don't uninstall when it fails.

Step 2: SSH into your NAS and navigate to /volume1/@appstore/java-installer/

Step 3: Bypass the SHA256 check in get-java.sh by changing line 73 of the script to:

Code: Select all

if [ "SHA256" != "SHA256" ]; then

I used Nano for this, because I have the Nano package from SynoCommunity installed, but any sudo'd text editor will work.

Step 4: Run the installer:

Code: Select all

sudo ./get-java.sh install jdk

Step 5: Do not uninstall the broken package, it will also remove Java along with it.
Edit: Also, the package no longer shows as broken for me after running it like this. Your mileage may vary.

FileBot now works perfectly, except you always get the following warning at the start:

Code: Select all

WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.codehaus.groovy.vmplugin.v7.Java7$1 (file:/volume1/@appstore/filebot/jar/groovy.jar) to constructor java.lang.invoke.MethodHandles$Lookup(java.lang.Class,int)
WARNING: Please consider reporting this to the maintainers of org.codehaus.groovy.vmplugin.v7.Java7$1
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release

Post by **rednoah** » 21 Apr 2019, 12:28

Checksum Fixed.

xIntenso · Post by **xIntenso** » 21 Apr 2019, 20:27

Thank you for being as fast as always!

I tried uninstalling and reinstalling, and can confirm it now works perfectly.

longdagger · Post by **longdagger** » 27 Apr 2019, 06:05

I have a problem installing. Based on the logs, seems that the link to download the targz is broken.

True enough, tested on browser, this file does not exist
https://download.java.net/java/GA/jdk12 ... bin.tar.gz

Code: Select all

cat install-java.log
Warning: Illegal date format for -z, --time-cond (and not a file name).
Warning: Disabling time condition. See curl_getdate(3) for valid date syntax.
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   862  100   862    0     0   2619      0 --:--:-- --:--:-- --:--:--  2628
cmp: EOF on /volume1/@appstore/java-installer/get-java.sh.asc
Sat Apr 27 13:53:18 +08 2019: AUTO UPDATE
Warning: Illegal date format for -z, --time-cond (and not a file name).
Warning: Disabling time condition. See curl_getdate(3) for valid date syntax.
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  3553  100  3553    0     0  10387      0 --:--:-- --:--:-- --:--:-- 10419
gpg: keyring `/volume1/@appstore/java-installer/.gnupg/pubring.gpg' created
gpg: Signature made Wed Apr 24 18:35:48 2019 +08 using RSA key ID 7C3C6A71
gpg: /volume1/@appstore/java-installer/.gnupg/trustdb.gpg: trustdb created
gpg: key 7C3C6A71 marked as ultimately trusted
gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: Good signature from "Reinhard Pointner <[email protected]>" [ultimate]
[GNUPG:] TRUST_ULTIMATE
Download https://download.java.net/java/GA/jdk12.0.1/69cfe15208a647278a19ef0990eea691/12/GPL/openjdk-12.0.1_linux-x64_bin.tar.gz
curl: (51) SSL: no alternative certificate subject name matches target host name 'download.java.net'
openjdk-12.0.1_linux-x64_bin.tar.gz: No such file or directory
Expected SHA256 checksum: 151eb4ec00f82e5e951126f572dc9116104c884d97f91be14ec11e85fc2dd626
Actual SHA256 checksum:
ERROR: SHA256 checksum mismatch

Post by **rednoah** » 27 Apr 2019, 06:08

Looks like the official download links are all broken:
https://jdk.java.net/12/

Also, SSL certificate is broken:

Code: Select all

curl: (51) SSL: no alternative certificate subject name matches target host name 'download.java.net'

Most likely a temporary issue that'll be fixed soon, or well, maybe at least by Monday afternoon.

Predator2912 · Post by **Predator2912** » 29 Apr 2019, 16:42

rednoah wrote: 27 Apr 2019, 06:08
Most likely a temporary issue that'll be fixed soon, or well, maybe at least by Monday afternoon.

Now it works again.
But i have the following Error Message.

Code: Select all

filebot -script 'fn:sysinfo'

------------------------------------------

WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.codehaus.groovy.vmplugin.v7.Java7$1 (file:/volume1/@appstore/filebot/jar/groovy.jar) to constructor java.lang.invoke.MethodHandles$Lookup(java.lang.Class,int)
WARNING: Please consider reporting this to the maintainers of org.codehaus.groovy.vmplugin.v7.Java7$1
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
FileBot 4.8.5 (r6224)
JNA Native: 5.2.2
MediaInfo: 17.12
7-Zip-JBinding: 9.20
Chromaprint: fpcalc version 1.4.3
Extended Attributes: OK
Unicode Filesystem: OK
Script Bundle: 2019-04-23 (r560)
Groovy: 2.5.6
JRE: OpenJDK Runtime Environment 12.0.1
JVM: 64-bit OpenJDK 64-Bit Server VM
CPU/MEM: 4 Core / 5 GB Max Memory / 18 MB Used Memory
OS: Linux (amd64)
HW: Linux MadM4x-NAS 3.10.105 #23824 SMP Tue Feb 12 16:50:45 CST 2019 x86_64 GNU/Linux synology_braswell_916+
DATA: /volume1/@appstore/filebot/data/admin
Package: SPK
License: FileBot License  (Valid-Until: 2019-09-24)
Done ヾ(＠⌒ー⌒＠)ノ
------------------------------------------

[Process completed]

install-java.log

Code: Select all

Warning: Illegal date format for -z, --time-cond (and not a file name).
Warning: Disabling time condition. See curl_getdate(3) for valid date syntax.
cmp: EOF on /volume1/@appstore/java-installer/get-java.sh.asc
Mon Apr 29 18:00:13 CEST 2019: AUTO UPDATE
Warning: Illegal date format for -z, --time-cond (and not a file name).
Warning: Disabling time condition. See curl_getdate(3) for valid date syntax.
gpg: keyring `/volume1/@appstore/java-installer/.gnupg/pubring.gpg' created
gpg: Signature made Wed Apr 24 12:35:48 2019 CEST using RSA key ID 7C3C6A71
gpg: /volume1/@appstore/java-installer/.gnupg/trustdb.gpg: trustdb created
gpg: key 7C3C6A71 marked as ultimately trusted
gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: Good signature from "Reinhard Pointner <[email protected]>" [ultimate]
[GNUPG:] TRUST_ULTIMATE
Download https://download.java.net/java/GA/jdk12.0.1/69cfe15208a647278a19ef0990eea691/12/GPL/openjdk-12.0.1_linux-x64_bin.tar.gz
Expected SHA256 checksum: 151eb4ec00f82e5e951126f572dc9116104c884d97f91be14ec11e85fc2dd626
Actual SHA256 checksum: 151eb4ec00f82e5e951126f572dc9116104c884d97f91be14ec11e85fc2dd626
Extract openjdk-12.0.1_linux-x64_bin.tar.gz


Execute /volume1/@appstore/java-installer/jdk-12.0.1/bin/java -XshowSettings -version
VM settings:
    Max. Heap Size (Estimated): 1.93G
    Using VM: OpenJDK 64-Bit Server VM

Property settings:
    awt.toolkit = sun.awt.X11.XToolkit
    file.encoding = ANSI_X3.4-1968
    file.separator = /
    java.awt.graphicsenv = sun.awt.X11GraphicsEnvironment
    java.class.path =
    java.class.version = 56.0
    java.home = /volume1/@appstore/java-installer/jdk-12.0.1
    java.io.tmpdir = /tmp
    java.library.path = /usr/java/packages/lib
        /usr/lib64
        /lib64
        /lib
        /usr/lib
    java.runtime.name = OpenJDK Runtime Environment
    java.runtime.version = 12.0.1+12
    java.specification.name = Java Platform API Specification
    java.specification.vendor = Oracle Corporation
    java.specification.version = 12
    java.vendor = Oracle Corporation
    java.vendor.url = https://java.oracle.com/
        java.vendor.url.bug = https://bugreport.java.com/bugreport/
    java.version = 12.0.1
    java.version.date = 2019-04-16
    java.vm.compressedOopsMode = 32-bit
    java.vm.info = mixed mode, sharing
    java.vm.name = OpenJDK 64-Bit Server VM
    java.vm.specification.name = Java Virtual Machine Specification
    java.vm.specification.vendor = Oracle Corporation
    java.vm.specification.version = 12
    java.vm.vendor = Oracle Corporation
    java.vm.version = 12.0.1+12
    jdk.debug = release
    line.separator = \n
    os.arch = amd64
    os.name = Linux
    os.version = 3.10.105
    path.separator = :
    sun.arch.data.model = 64
    sun.boot.library.path = /volume1/@appstore/java-installer/jdk-12.0.1/lib
    sun.cpu.endian = little
    sun.io.unicode.encoding = UnicodeLittle
        java.specification.version = 12
    java.vendor = Oracle Corporation
    java.vendor.url = https://java.oracle.com/
    java.vendor.url.bug = https://bugreport.java.com/bugreport/
    java.version = 12.0.1
    java.version.date = 2019-04-16
    java.vm.compressedOopsMode = 32-bit
    java.vm.info = mixed mode, sharing
    java.vm.name = OpenJDK 64-Bit Server VM
    java.vm.specification.name = Java Virtual Machine Specification
    java.vm.specification.vendor = Oracle Corporation
    java.vm.specification.version = 12
    java.vm.vendor = Oracle Corporation
    java.vm.version = 12.0.1+12
    jdk.debug = release
    line.separator = \n
    os.arch = amd64
    os.name = Linux
    os.version = 3.10.105
    path.separator = :
    sun.arch.data.model = 64
    sun.boot.library.path = /volume1/@appstore/java-installer/jdk-12.0.1/lib
    sun.cpu.endian = little
    sun.io.unicode.encoding = UnicodeLittle
    sun.java.launcher = SUN_STANDARD
    sun.jnu.encoding = ANSI_X3.4-1968
    sun.management.compiler = HotSpot 64-Bit Tiered Compilers
    user.country = US
    user.dir = /volume1/@appstore/java-installer
    user.home = /root
    user.language = en
    user.name = root

Locale settings:
    default locale = English (United States)
    default display locale = English (United States)
    default format locale = English (United States)


Operating System Metrics:
    Provider: cgroupv1
    Effective CPU Count: 4
    CPU Period: 0us
    CPU Quota: 0us
    CPU Shares: -1
    List of Processors, 4 total:
    0 1 2 3
    List of Effective Processors, 0 total:
        List of Memory Nodes, 1 total:
    0
    List of Available Memory Nodes, 0 total:
        CPUSet Memory Pressure Enabled: false
    Memory Limit: Unlimited
    Memory Soft Limit: Unlimited
    Memory & Swap Limit: Unlimited
    Kernel Memory Limit: 0.00K
    TCP Memory Limit: 0.00K
    Out Of Memory Killer Enabled: true

openjdk version "12.0.1" 2019-04-16
OpenJDK Runtime Environment (build 12.0.1+12)
OpenJDK 64-Bit Server VM (build 12.0.1+12, mixed mode, sharing)
Mon Apr 29 18:00:53 CEST 2019: Add environment variables to /etc/profile

Post by **rednoah** » 29 Apr 2019, 17:06

What error message? Looks like it's working.

Predator2912 · Post by **Predator2912** » 29 Apr 2019, 18:05

Is this normally?

Code: Select all

WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.codehaus.groovy.vmplugin.v7.Java7$1 (file:/volume1/@appstore/filebot/jar/groovy.jar) to constructor java.lang.invoke.MethodHandles$Lookup(java.lang.Class,int)
WARNING: Please consider reporting this to the maintainers of org.codehaus.groovy.vmplugin.v7.Java7$1
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release

Before installing Java 12 it wouldn't show under Filebot-Node Systeminfo...

Post by **rednoah** » 29 Apr 2019, 18:28

Just a warning you can ignore. That one can't be helped with any Java 9+ runtime.

sanfly · Post by **sanfly** » 11 May 2019, 10:42

I'm also have issues installing the Java Installer. It seems to install but then says that an error occurred and it needs to be fixed.

When I look in DSM > Log Centre it says that Java Installer was successfully installed.

I am unsure where to find the other logs as people have posted in this thread previously. I'm comfortable enough using command line, I just don't know where to go!

Can anyone assist?

Post by **rednoah** » 11 May 2019, 11:17

What does the log say?

You can find the log with the find command:

Code: Select all

$ find / -iname '*.log' 2>&1 | grep java
/volume1/@appstore/java-installer/install-java.log

You can then read the log with cat which probably requires permissions so we use sudo for that:

Code: Select all

sudo cat /volume1/@appstore/java-installer/install-java.log

sanfly · Post by **sanfly** » 12 May 2019, 00:39

Thanks for the direction

Code: Select all

Warning: Illegal date format for -z, --time-cond (and not a file name). 
Warning: Disabling time condition. See curl_getdate(3) for valid date syntax.
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   862  100   862    0     0    818      0  0:00:01  0:00:01 --:--:--   820
cmp: EOF on /volume1/@appstore/java-installer/get-java.sh.asc
Sun May 12 14:31:36 NZST 2019: AUTO UPDATE
Warning: Illegal date format for -z, --time-cond (and not a file name). 
Warning: Disabling time condition. See curl_getdate(3) for valid date syntax.
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  3553  100  3553    0     0   3745      0 --:--:-- --:--:-- --:--:--  3747
gpg: keyring `/volume1/@appstore/java-installer/.gnupg/pubring.gpg' created
gpg: Signature made Wed Apr 24 22:35:48 2019 NZST using RSA key ID 7C3C6A71
gpg: /volume1/@appstore/java-installer/.gnupg/trustdb.gpg: trustdb created
gpg: key 7C3C6A71 marked as ultimately trusted
gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: Good signature from "Reinhard Pointner <[email protected]>" [ultimate]
[GNUPG:] TRUST_ULTIMATE
Architecture not supported: Linux armv5tel
Sun May 12 14:31:38 NZST 2019: Add environment variables to /etc/profile

Post by **rednoah** » 12 May 2019, 04:41

You're out of luck. armv5tel is generally not supported by any recent Java release:

Code: Select all

Architecture not supported: Linux armv5tel

You might be able to find older Oracle Java 8 Embedded builds though.

sanfly · Post by **sanfly** » 12 May 2019, 05:10

Thanks, perhaps the push I needed to update my 7 year old NAS?

In the meantime I might investigate shifting these tasks to my Raspberry Pi...

Post by **rednoah** » 12 May 2019, 05:27

It's just bad luck with CPU architecture. Compatibility wasn't a concern for earlier arm processors.

In any case, make sure to upgrade to an aarch64 device if you do. That'll be around for a while.

nickleigh78 · Post by **nickleigh78** » 20 Nov 2025, 23:27

Currently having an issue with the Synology Java installer (23) on Synology DSM 7.2.2-72806 Update 5
DSM update was automatically installed overnight
Checksum mismatch and curl resolve host error in the install-java.log

Please could you provide any advice to fix the error.

Many thanks

Console Output: Select all

$ cat /volume1/@appstore/java-installer/install-java.log
cmp: EOF on /volume1/@appstore/java-installer/get-java.sh.asc which is empty
Fri Nov 21 09:01:08 AEST 2025: AUTO UPDATE
gpgv: Signature made Mon Feb  3 17:58:27 2025 AEST
gpgv:                using RSA key 27B74F30D08404D1CCA0AF848A17D093B565EAD7
gpgv: Good signature from "imnks.com <[email protected]>"
Download https://ghproxy.cn/https://github.com/adoptium/temurin23-binaries/releases/download/jdk-23.0.2%2B7/OpenJDK23U-jdk_x64_linux_hotspot_23.0.2_7.tar.gz
curl: (6) Could not resolve host: ghproxy.cfd
curl: (6) Could not resolve host: ghproxy.cfd
curl: (6) Could not resolve host: ghproxy.cfd
curl: (6) Could not resolve host: ghproxy.cfd
curl: (6) Could not resolve host: ghproxy.cfd
curl: (6) Could not resolve host: ghproxy.cfd
OpenJDK23U-jdk_x64_linux_hotspot_23.0.2_7.tar.gz: No such file or directory
Expected SHA256 checksum: 870ac8c05c6fe563e7a3878a47d0234b83c050e83651d2c47e8b822ec74512dd
Actual SHA256 checksum:
ERROR: SHA256 checksum mismatch
removed 'bin/java'
removed directory 'bin'
rm: cannot remove 'include': No such file or directory
rm: cannot remove 'jmods': No such file or directory
rm: cannot remove 'lib': No such file or directory
rm: cannot remove 'conf': No such file or directory
rm: cannot remove 'legal': No such file or directory
rm: cannot remove 'man': No such file or directory
tar (child): *.tar.gz: Cannot open: No such file or directory
tar (child): Error is not recoverable: exiting now
tar: Child returned status 2
tar: Error is not recoverable: exiting now

Post by **rednoah** » 21 Nov 2025, 02:28

What does cat /volume1/@appstore/java-installer/get-java.sh say?

Where did you get your Synology Java installer (23) package from? The console output suggests that you're using a package made by some Chinese guy, which is highly concerning if you are working under the assumption that you're using trusted code published by the FileBot team? The official java-installer code notably would be (1) signed by us and (2) not download files via ghproxy.cn and (3) install OpenJDK 21 at the time of writing:

Console Output: Select all

gpgv: Signature made Mon Feb  3 17:58:27 2025 AEST
gpgv:                using RSA key 27B74F30D08404D1CCA0AF848A17D093B565EAD7
gpgv: Good signature from "imnks.com <[email protected]>"
Download https://ghproxy.cn/https://github.com/adoptium/temurin23-binaries/releases/download/jdk-23.0.2%2B7/OpenJDK23U-jdk_x64_linux_hotspot_23.0.2_7.tar.gz
curl: (6) Could not resolve host: ghproxy.cfd

UPDATE

[Synology] Java Installer fails to update: ghproxy.cfd DNS error (curl: Could not resolve host)

nickleigh78 · Post by **nickleigh78** » 21 Nov 2025, 12:28

Hello,

Thanks for the reply. I added the Rednoah Java & FileBot Repository to DSM Package Manager (https://get.filebot.net/syno/) a long time ago, probably around Java 17 on this NAS, and added the Java Installer package. As far as memory serves, it was a rednoah developer and rednoah publisher but now it is not....

https://www.dropbox.com/scl/fi/d5rpouq5 ... zydt5&dl=0

I have uninstalled the package and will wait for your response regarding the output of

Code: Select all

cat /volume1/@appstore/java-installer/get-java.sh

Code: Select all

#!/bin/sh

# Java Installer for OpenJDK 21.0.3

COMMAND=${1:-get}        # get | install
TYPE=${2:-jdk}           # jre | jdk
ARCH=${3:-`uname -m`}    # x86_64 | i686 | aarch64 | armv7l | etc
OS=${4:-`uname -s`}      # Linux | Darwin | Windows | etc

case "$OS $ARCH $TYPE" in
	"Linux x86_64 jdk")
		JDK_URL="https://ghproxy.cn/https://github.com/adoptium/temurin23-binaries/releases/download/jdk-23.0.2%2B7/OpenJDK23U-jdk_x64_linux_hotspot_23.0.2_7.tar.gz"
		JDK_SHA256="870ac8c05c6fe563e7a3878a47d0234b83c050e83651d2c47e8b822ec74512dd"
	;;
	"Linux i686 jdk")
		JDK_URL="https://download.bell-sw.com/java/21.0.3+10/bellsoft-jdk21.0.3+10-linux-i586.tar.gz"
		JDK_SHA256="9379b368034b095cf0af15b6aa5a6a3548cd1e3aef32e8db6a7409fd3de12375"
	;;
	"Linux aarch64 jdk")
		JDK_URL="https://ghproxy.cn/https://github.com/adoptium/temurin23-binaries/releases/download/jdk-23.0.2%2B7/OpenJDK23U-jdk_aarch64_linux_hotspot_23.0.2_7.tar.gz"
		JDK_SHA256="fb43ae1202402842559cb6223886ec1663b90ffbec48479abbcb92c92c9012eb"
	;;
	"Linux armv7l jdk")
		JDK_URL="https://download.bell-sw.com/java/21.0.3+10/bellsoft-jdk21.0.3+10-linux-arm32-vfp-hflt.tar.gz"
		JDK_SHA256="cdb909ec6afe0a0a003e5214904cf6efae967150649ae351c54fe40487317fb0"
	;;
	"Linux ppc64le jdk")
		JDK_URL="https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.3%2B9/OpenJDK21U-jdk_ppc64le_linux_hotspot_21.0.3_9.tar.gz"
		JDK_SHA256="9a1079d7f0fc72951fdc9a0029e49a15f6ba114683aee626f882ee2c761f1d57"
	;;
	"Linux riscv64 jdk")
		JDK_URL="https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.3%2B9/OpenJDK21U-jdk_riscv64_linux_hotspot_21.0.3_9.tar.gz"
		JDK_SHA256="246acb1db3ef69a7e3328fa378513b2e606e64710626ae8dd29decc0e525359b"
	;;

	"Darwin x86_64 jdk")
		JDK_URL="https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.3%2B9/OpenJDK21U-jdk_x64_mac_hotspot_21.0.3_9.tar.gz"
		JDK_SHA256="f777103aab94330d14a29bd99f3a26d60abbab8e2c375cec9602746096721a7c"
	;;
	"Darwin arm64 jdk")
		JDK_URL="https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.3%2B9/OpenJDK21U-jdk_aarch64_mac_hotspot_21.0.3_9.tar.gz"
		JDK_SHA256="b6be6a9568be83695ec6b7cb977f4902f7be47d74494c290bc2a5c3c951e254f"
	;;

	"Windows x86_64 jdk")
		JDK_URL="https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.3%2B9/OpenJDK21U-jdk_x64_windows_hotspot_21.0.3_9.zip"
		JDK_SHA256="c43a66cff7a403d56c5c5e1ff10d3d5f95961abf80f97f0e35380594909f0e4d"
	;;
	"Windows x86 jdk")
		JDK_URL="https://download.bell-sw.com/java/21.0.3+10/bellsoft-jdk21.0.3+10-windows-i586.zip"
		JDK_SHA256="8dd427b20d6f8bcb66d43bbd6a4dc5b5433f9554a38017d1b1cc6a8c0568387d"
	;;
	"Windows aarch64 jdk")
		JDK_URL="https://download.bell-sw.com/java/21.0.3+10/bellsoft-jdk21.0.3+10-windows-aarch64.zip"
		JDK_SHA256="ac148b0fbfe253bcd449399371a6bd491f9f23a0a67b3bd920657e4f9470578a"
	;;

	"Linux x86_64 jfx")
		JDK_URL="https://download2.gluonhq.com/openjfx/21.0.3/openjfx-21.0.3_linux-x64_bin-jmods.zip"
		JDK_SHA256="62c92a586a53c7169b8cdbc1a21b86be0c438e2e8786c4df11bfcb2cca69aa8f"
	;;

	"Darwin x86_64 jfx")
		JDK_URL="https://download2.gluonhq.com/openjfx/21.0.3/openjfx-21.0.3_osx-x64_bin-jmods.zip"
		JDK_SHA256="0a12ad01d8450437be3608175428b336f94bc8446123e804ae99d2d09a158a76"
	;;
	"Darwin arm64 jfx")
		JDK_URL="https://download2.gluonhq.com/openjfx/21.0.3/openjfx-21.0.3_osx-aarch64_bin-jmods.zip"
		JDK_SHA256="61e78370159e22902ce5a8224e278d02a9f1471aff56e2cef0fba30709a07d21"
	;;

	"Windows x86_64 jfx")
		JDK_URL="https://download2.gluonhq.com/openjfx/21.0.3/openjfx-21.0.3_windows-x64_bin-jmods.zip"
		JDK_SHA256="f66cb1b4f027164544b059c3aed503890df94602163740236e2f3c2fab0cb0cd"
	;;

	*)
		echo "Architecture not supported: $OS $ARCH $TYPE"
		exit 1
	;;
esac


# fetch JDK
JDK_TAR_GZ=${5:-`basename $JDK_URL`}

if [ ! -f "$JDK_TAR_GZ" ]; then
	echo "Download $JDK_URL"
	curl -fsSL -o "$JDK_TAR_GZ" --retry 5 "$JDK_URL"
fi


# verify archive via SHA-256 checksum
JDK_SHA256_ACTUAL=`openssl dgst -sha256 -hex "$JDK_TAR_GZ" | awk '{print $NF}'`
echo "Expected SHA256 checksum: $JDK_SHA256"
echo "Actual SHA256 checksum: $JDK_SHA256_ACTUAL"

if [ "$JDK_SHA256" != "$JDK_SHA256_ACTUAL" ]; then
	echo "ERROR: SHA256 checksum mismatch"
	exit 1
fi


# extract and link only if explicitly requested
if [ "$COMMAND" != "install" ]; then
	echo "Download complete: $JDK_TAR_GZ"
	exit 0
fi


echo "Extract $JDK_TAR_GZ"
tar -v -zxf "$JDK_TAR_GZ"

# find java executable
JAVA_EXE=`find "$PWD" -name "java" -type f | head -n 1`

# link executable into /usr/local/bin/java
mkdir -p "/usr/local/bin"
ln -s -f "$JAVA_EXE" "/usr/local/bin/java"

# link java home to /usr/local/java
JAVA_BIN=`dirname $JAVA_EXE`
JAVA_HOME=`dirname $JAVA_BIN`
ln -s -f "$JAVA_HOME" "/usr/local/java"

# test
echo "Execute $JAVA_EXE -XshowSettings -version"
"$JAVA_EXE" -XshowSettings -version

Many thanks.

Post by **rednoah** » 21 Nov 2025, 14:43

https://get.filebot.net/syno/ is our package repository. You seem to have added a different package from a different package source that uses the same name. You seem to have installed software for the https://spk7.imnks.com/ package repository, which seems to have java-installer packages that are based on our official package but with modifications for users in China.

UPDATE

[Synology] Java Installer fails to update: ghproxy.cfd DNS error (curl: Could not resolve host)

nickleigh78 · Post by **nickleigh78** » 25 Nov 2025, 14:27

As highlighted in [Synology] Java Installer fails to update: ghproxy.cfd DNS error (curl: Could not resolve host), once i removed the "https://synopackage.com/repository/spk/All" package source, i was finally able to reinstall the offical rednoah Java Installer package on DSM for a user outside China.

viewtopic.php?t=14919

Linus · Post by **Linus** » 01 Dec 2025, 20:38

I'm sorry to inform you that I am also experiencing the problem mentioned below.

nickleigh78 wrote: 20 Nov 2025, 23:27 Currently having an issue with the Synology Java installer (23) on Synology DSM 7.2.2-72806 Update 5
DSM update was automatically installed overnight
Checksum mismatch and curl resolve host error in the install-java.log

Please could you provide any advice to fix the error.

Many thanks

Console Output: Select all

$ cat /volume1/@appstore/java-installer/install-java.log
cmp: EOF on /volume1/@appstore/java-installer/get-java.sh.asc which is empty
Fri Nov 21 09:01:08 AEST 2025: AUTO UPDATE
gpgv: Signature made Mon Feb  3 17:58:27 2025 AEST
gpgv:                using RSA key 27B74F30D08404D1CCA0AF848A17D093B565EAD7
gpgv: Good signature from "imnks.com <[email protected]>"
Download https://ghproxy.cn/https://github.com/adoptium/temurin23-binaries/releases/download/jdk-23.0.2%2B7/OpenJDK23U-jdk_x64_linux_hotspot_23.0.2_7.tar.gz
curl: (6) Could not resolve host: ghproxy.cfd
curl: (6) Could not resolve host: ghproxy.cfd
curl: (6) Could not resolve host: ghproxy.cfd
curl: (6) Could not resolve host: ghproxy.cfd
curl: (6) Could not resolve host: ghproxy.cfd
curl: (6) Could not resolve host: ghproxy.cfd
OpenJDK23U-jdk_x64_linux_hotspot_23.0.2_7.tar.gz: No such file or directory
Expected SHA256 checksum: 870ac8c05c6fe563e7a3878a47d0234b83c050e83651d2c47e8b822ec74512dd
Actual SHA256 checksum:
ERROR: SHA256 checksum mismatch
removed 'bin/java'
removed directory 'bin'
rm: cannot remove 'include': No such file or directory
rm: cannot remove 'jmods': No such file or directory
rm: cannot remove 'lib': No such file or directory
rm: cannot remove 'conf': No such file or directory
rm: cannot remove 'legal': No such file or directory
rm: cannot remove 'man': No such file or directory
tar (child): *.tar.gz: Cannot open: No such file or directory
tar (child): Error is not recoverable: exiting now
tar: Child returned status 2
tar: Error is not recoverable: exiting now

Post by **rednoah** » 02 Dec 2025, 03:00

This problem has been solved. The root cause is adding a 3rd party package repository that uses the same package ID as the official packages from our official repository.

Please read the posts above for details.

Linus · Post by **Linus** » 02 Dec 2025, 13:32

rednoah wrote: 02 Dec 2025, 03:00 This problem has been solved. The root cause is adding a 3rd party package repository that uses the same package ID as the official packages from our official repository.

Please read the posts above for details.

I don't have this package repository installed and never had.

Post by **rednoah** » 02 Dec 2025, 14:30

Linus wrote: 02 Dec 2025, 13:32 I don't have this package repository installed and never had.

Then the issue you have is not the issue discussed on this thread.

What does the log say?

If the log says Could not resolve host: ghproxy.cfd then you most assuredly are not using our java-installer package. If the log says something else, then it's a different issue.

Linus · Post by **Linus** » 03 Dec 2025, 13:16

The log says:

Console Output: Select all

cmp: EOF on /volume1/@appstore/java-installer/get-java.sh.asc
Wed Dec  3 14:13:38 CET 2025: AUTO UPDATE
gpgv: Signature made Sun Nov  9 10:35:16 2025 CET
gpgv:                using RSA key B0976E51E5C047AD0FD051294E402EBF7C3C6A71
gpgv:                issuer "[email protected]"
gpgv: Good signature from "Reinhard Pointner <[email protected]>"
Download https://download.bell-sw.com/java/21.0.9+11/bellsoft-jdk21.0.9+11-linux-arm32-vfp-hflt.tar.gz
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
bellsoft-jdk21.0.9+11-linux-arm32-vfp-hflt.tar.gz: No such file or directory
Expected SHA256 checksum: ae2d3e750496da6d5fd467c5c7e0d2146bdcdd8ad9aa902a09fbdfc3cb542e86
Actual SHA256 checksum: 
ERROR: SHA256 checksum mismatch
removed 'bin/java'
removed directory 'bin'
rm: cannot remove 'include': No such file or directory
rm: cannot remove 'jmods': No such file or directory
rm: cannot remove 'lib': No such file or directory
rm: cannot remove 'conf': No such file or directory
rm: cannot remove 'legal': No such file or directory
rm: cannot remove 'man': No such file or directory
tar (child): *.tar.gz: Cannot open: No such file or directory
tar (child): Error is not recoverable: exiting now
tar: Child returned status 2
tar: Error is not recoverable: exiting now

Post by **rednoah** » 03 Dec 2025, 16:03

The URL itself works:

Code: Select all

https://download.bell-sw.com/java/21.0.9+11/bellsoft-jdk21.0.9+11-linux-arm32-vfp-hflt.tar.gz

But you're getting an SSL error:

Console Output: Select all

curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Unfortunately, since I cannot reproduce the issue, you'll have to figure it out from there yourself from your end. The gist is simply that your NAS fails to download that file. If you SSH into the NAS and try to do it manually step-by-step, you might be able to figure something out, some technical expertise required though.

SSL certificate problem: unable to get local issuer certificate might indicate that your NAS is very out-of-date and doesn't have the current common root certificates required for HTTPS connections. That's just a random guess though. Could be something else entirely.

Linus · Post by **Linus** » 04 Dec 2025, 11:02

Thank you very much!

What makes me wonder is that I didn’t have any problem installing the Java installer at first. But then, all of a sudden, it stopped working, and the package showed “Repair.” Now I can’t reinstall it anymore.

Post by **rednoah** » 04 Dec 2025, 12:13

SSL certificates expire and get renewed all the time. It's very possible for something to work last year / month / week and not work this year / month / week.

Linus · Post by **Linus** » 08 Dec 2025, 10:10

Okay, thank you for the information.

Post by **rednoah** » 08 Dec 2025, 10:29

Linus wrote: 08 Dec 2025, 10:10 Okay, thank you for the information.

Does it still not work if you try again? What DSM version / device are you using?

Linus · Post by **Linus** » 11 Dec 2025, 13:04

Negative, it's still not working...

Device: DS414
DSM Version: DSM 7.1.1-42962 Update 9

Thanks!

Post by **rednoah** » 11 Dec 2025, 15:37

You could try to SSH into your DS414 and see what the openssl command says?

Console Output: Select all

rednoah@DS120j:~$ openssl s_client -connect download.bell-sw.com:443
CONNECTED(00000003)
depth=2 C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46
verify return:1
depth=1 C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36
verify return:1
depth=0 C = US, ST = California, O = BELLSOFT, CN = *.bell-sw.com
verify return:1
---
Certificate chain
 0 s:C = US, ST = California, O = BELLSOFT, CN = *.bell-sw.com
   i:C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36
 1 s:C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36
   i:C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46
---
...

Linus · Post by **Linus** » 14 Dec 2025, 12:38

It says:

Console Output: Select all

root@DS414:~# openssl s_client -connect download.bell-sw.com:443
CONNECTED(00000004)
depth=1 C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 C = US, ST = California, O = BELLSOFT, CN = *.bell-sw.com
verify return:1
---
Certificate chain
 0 s:C = US, ST = California, O = BELLSOFT, CN = *.bell-sw.com
   i:C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36
 1 s:C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36
   i:C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46
---

Post by **rednoah** » 14 Dec 2025, 14:56

Well, openssl seems to say that the certificate chain is good... What if you try this with curl?

Console Output: Select all

$ curl -v -I 'https://download.bell-sw.com/java/21.0.9+11/bellsoft-jdk21.0.9+11-linux-arm32-vfp-hflt.tar.gz'
* TLSv1.0 (OUT), TLS header, Certificate Status (22):
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS header, Certificate Status (22):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS header, Finished (20):
* TLSv1.2 (IN), TLS header, Supplemental data (23):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.2 (OUT), TLS header, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS header, Supplemental data (23):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (OUT), TLS header, Supplemental data (23):
* TLSv1.2 (OUT), TLS header, Supplemental data (23):
* TLSv1.2 (OUT), TLS header, Supplemental data (23):
* TLSv1.2 (OUT), TLS header, Supplemental data (23):
> HEAD /java/21.0.9+11/bellsoft-jdk21.0.9+11-linux-arm32-vfp-hflt.tar.gz HTTP/2
> Host: download.bell-sw.com
> user-agent: curl/7.86.0
> accept: */*
>
* TLSv1.2 (IN), TLS header, Supplemental data (23):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.2 (IN), TLS header, Supplemental data (23):
* TLSv1.2 (OUT), TLS header, Supplemental data (23):
* TLSv1.2 (IN), TLS header, Supplemental data (23):
* TLSv1.2 (IN), TLS header, Supplemental data (23):
< HTTP/2 200
HTTP/2 200
...

Linus · Post by **Linus** » 14 Dec 2025, 17:16

That's the output:

Console Output: Select all

root@DS414:~# curl -v -I 'https://download.bell-sw.com/java/21.0.9+11/bellsoft-jdk21.0.9+11-linux-arm32-vfp-hflt.tar.gz'
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: unable to get local issuer certificate
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Linus · Post by **Linus** » 14 Dec 2025, 17:18

Btw: How can I have it as console output?
Thanks.

Post by **rednoah** » 14 Dec 2025, 17:46

I was somehow completely blind to openssl actually printing an error:

Console Output: Select all

verify error:num=20:unable to get local issuer certificate

That matches the error from curl:

Console Output: Select all

* TLSv1.3 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: unable to get local issuer certificate

The Sectigo Public Server Authentication Root R46 root certificate is missing on your machine, so any SSL connection to any site that is verified by this root certificate will fail. I have no idea why this particular root certificate is missing on your DSM machine when it seems to be default on other DSM machines.

Linus · Post by **Linus** » 14 Dec 2025, 18:00

Thank you for figuring that out.
Do you think there is anything I can do about it?

Post by **rednoah** » 14 Dec 2025, 18:10

You could try to modify /var/packages/java-installer/target/get-java.sh and replace:

Shell: Select all

	curl -fsSL -o "$JDK_TAR_GZ" --retry 5 "$JDK_URL"

with:

Shell: Select all

	curl --insecure -fsSL -o "$JDK_TAR_GZ" --retry 5 "$JDK_URL"

Then restart the NAS to trigger the auto-update on start.

Linus · Post by **Linus** » 14 Dec 2025, 20:28

Thank you

Unfortunately, it didn't work out...

Post by **rednoah** » 15 Dec 2025, 03:21

Linus wrote: 14 Dec 2025, 20:28 Unfortunately, it didn't work out...

What did the curl console output say when it didn't work out?

Linus · Post by **Linus** » 20 Dec 2025, 10:45

That's the curl output:

Console Output: Select all

~# curl -v -I 'https://download.bell-sw.com/java/21.0.9+11/bellsoft-jdk21.0.9+11-linux-arm32-vfp-hflt.tar.gz'
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: unable to get local issuer certificate
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Post by **rednoah** » 20 Dec 2025, 11:08

rednoah wrote: 14 Dec 2025, 18:10 You could try to modify /var/packages/java-installer/target/get-java.sh and replace:
Shell: Select all
	curl -fsSL -o "$JDK_TAR_GZ" --retry 5 "$JDK_URL"
with:
Shell: Select all
	curl --insecure -fsSL -o "$JDK_TAR_GZ" --retry 5 "$JDK_URL"
Then restart the NAS to trigger the auto-update on start.

Linus wrote: 14 Dec 2025, 20:28 Thank you
Unfortunately, it didn't work out...

Linus wrote: 20 Dec 2025, 10:45 That's the curl output:

Console Output: Select all

~# curl -v -I 'https://download.bell-sw.com/java/21.0.9+11/bellsoft-jdk21.0.9+11-linux-arm32-vfp-hflt.tar.gz'
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: unable to get local issuer certificate
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

The gist of my previous post is that adding the --insecure option to the curl command will make curl ignore certificate errors. Your most recent post shows a curl command without the --insecure option, and also isn't the output of the (now modified as instructed above) /var/packages/java-installer/target/get-java.sh script as it is running and either succeeding or failing, after being triggered and run on reboot.

You'll want to modify the /var/packages/java-installer/target/get-java.sh script as instructed above, then reboot the NAS, then look at the log file.