# Unable to verify open ports, unable to validate external port **URL:** \ **Category:** Access Issues\ **Created:** [2 October 2021 00:04 UTC](https://syncloud.discourse.group/t/unable-to-verify-open-ports-unable-to-validate-external-port/101 "2021-10-02T00:04:34Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![caseystevens](https://yyz2.discourse-cdn.com/free1/user_avatar/syncloud.discourse.group/caseystevens/32/15_2.png) [@caseystevens](https://syncloud.discourse.group/u/caseystevens)\ **Post date:** [2 October 2021 00:04 UTC](https://syncloud.discourse.group/t/unable-to-verify-open-ports-unable-to-validate-external-port/101/1 "2021-10-02T00:04:34Z")
I upgraded to the premium with my own domain and activated it, following all the steps mentioned on Syncloud account page. However, I notice that the device now shows red on the devices page instead of green. I am unable to enable external access on the syncloud device and get the following error Unable to verify open ports, unable to validate external port: (“bad handshake: Error([(‘SSL routines’, ‘tls\_process\_server\_certificate’, ‘certificate verify failed’)])”,) Can you help me? ---
**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\ **Post date:** [2 October 2021 09:29 UTC](https://syncloud.discourse.group/t/unable-to-verify-open-ports-unable-to-validate-external-port/101/2 "2021-10-02T09:29:27Z")
Hello Casey, For external access you need to have open ports (443/80) on your router, do you have that? > **[External access · syncloud/platform Wiki](https://github.com/syncloud/platform/wiki/External-access)** > > Run popular services on your device with one click - External access · syncloud/platform Wiki Thank you very much for using our premium service! ---
**Author:** ![caseystevens](https://yyz2.discourse-cdn.com/free1/user_avatar/syncloud.discourse.group/caseystevens/32/15_2.png) [@caseystevens](https://syncloud.discourse.group/u/caseystevens)\ **Post date:** [2 October 2021 16:41 UTC](https://syncloud.discourse.group/t/unable-to-verify-open-ports-unable-to-validate-external-port/101/3 "2021-10-02T16:41:29Z")
I have both 80 and 443 open on my router. I think the issue is that I was using the free service before and it had a cert for that and now it needs to be updated to my domain for the premium service and I don’t know how to do that on my syncloud device. ---
**Author:** ![caseystevens](https://yyz2.discourse-cdn.com/free1/user_avatar/syncloud.discourse.group/caseystevens/32/15_2.png) [@caseystevens](https://syncloud.discourse.group/u/caseystevens)\ **Post date:** [2 October 2021 21:21 UTC](https://syncloud.discourse.group/t/unable-to-verify-open-ports-unable-to-validate-external-port/101/4 "2021-10-02T21:21:01Z")
So, my certs are a huge mess, but looks like I can’t get any help with unless I fix the certs. So, about ready to give up on this unless I can get some help. I would like to use the premium service, but when I activate with my own domain, the certs on the server are still for the free service I was using with the syncloud.it ending on it. I am terrible with certs. Don’t understand them at all. So, I desperately need some help or I’m quitting syncloud. Just not worth all the frustration. ---
**Author:** ![caseystevens](https://yyz2.discourse-cdn.com/free1/user_avatar/syncloud.discourse.group/caseystevens/32/15_2.png) [@caseystevens](https://syncloud.discourse.group/u/caseystevens)\ **Post date:** [2 October 2021 21:32 UTC](https://syncloud.discourse.group/t/unable-to-verify-open-ports-unable-to-validate-external-port/101/5 "2021-10-02T21:32:51Z")
Hi, Boris, This doesn’t work for me. I have both 80 and 443 open on my router for this. When I try to enable external access, I get a cert error. When I try to install updates, I get a cert error. When I try to send logs to support, I get a cert error. Looks like all the certs are for my previous setup using the free service with syncloud, my domain name with syncloud being [stevensfamily.syncloud.com](http://stevensfamily.syncloud.com). I wanted to switch to premium service and I did switch it using my new domain stevensfamily.cloud, but then the certs are all messed up and I don’t know how to fix them. Please help. If I can’t get this fixed soon, I may need to cancel syncloud. I repeatedly get this error: Unable to verify open ports, unable to validate external port: (“bad handshake: Error([(‘SSL routines’, ‘tls\_process\_server\_certificate’, ‘certificate verify failed’)])”,) and I don’t know how to fix it. Thank you, Casey Stevens ![C31E52ADF090411A968C918EC8518AF5.png](https://global.discourse-cdn.com/free1/uploads/syncloud/original/1X/7159a975d714a6caee787759490140daf4d4fda6.png) ---
**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\ **Post date:** [3 October 2021 00:25 UTC](https://syncloud.discourse.group/t/unable-to-verify-open-ports-unable-to-validate-external-port/101/6 "2021-10-03T00:25:59Z")
Hi, Looks like Syncloud was affected by this [DST Root CA X3 Expiration (September 2021) - Let's Encrypt](https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/) I have just pushed a fix, could you upgrade system from Settings - Updates? If you cannot activate could you run this command uaing ssh: ```auto snap refresh platform ``` How to access device using ssh: [SSH · syncloud/platform Wiki · GitHub](https://github.com/syncloud/platform/wiki/SSH) ---
**Author:** ![caseystevens](https://yyz2.discourse-cdn.com/free1/user_avatar/syncloud.discourse.group/caseystevens/32/15_2.png) [@caseystevens](https://syncloud.discourse.group/u/caseystevens)\ **Post date:** [3 October 2021 00:47 UTC](https://syncloud.discourse.group/t/unable-to-verify-open-ports-unable-to-validate-external-port/101/7 "2021-10-03T00:47:37Z")
Thank you, Boris. I updated it with the SSH command (updates broken on the web page) you gave me and rebooted the server. What happens next? Casey Stevens ![C31E52ADF090411A968C918EC8518AF5.png](https://global.discourse-cdn.com/free1/uploads/syncloud/original/1X/7159a975d714a6caee787759490140daf4d4fda6.png) ---
**Author:** ![caseystevens](https://yyz2.discourse-cdn.com/free1/user_avatar/syncloud.discourse.group/caseystevens/32/15_2.png) [@caseystevens](https://syncloud.discourse.group/u/caseystevens)\ **Post date:** [3 October 2021 01:04 UTC](https://syncloud.discourse.group/t/unable-to-verify-open-ports-unable-to-validate-external-port/101/8 "2021-10-03T01:04:00Z")
Hi, Boris, Would it also be possible to change my name servers to the following instead of what is currently assigned to me? ![C31E52ADF090411A968C918EC8518AF5.png](https://global.discourse-cdn.com/free1/uploads/syncloud/original/1X/7159a975d714a6caee787759490140daf4d4fda6.png) ---
**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\ **Post date:** [3 October 2021 07:56 UTC](https://syncloud.discourse.group/t/unable-to-verify-open-ports-unable-to-validate-external-port/101/9 "2021-10-03T07:56:00Z")
First of all, can you now enable external access? Nameservers are not possible to change they are holding your domain dns zone and properly distributed around the world. We are getting them from amazon web services per subscription. ---
**Author:** ![caseystevens](https://yyz2.discourse-cdn.com/free1/user_avatar/syncloud.discourse.group/caseystevens/32/15_2.png) [@caseystevens](https://syncloud.discourse.group/u/caseystevens)\ **Post date:** [3 October 2021 12:50 UTC](https://syncloud.discourse.group/t/unable-to-verify-open-ports-unable-to-validate-external-port/101/10 "2021-10-03T12:50:36Z")
Hi, Boris, The patch you had me install fixed the external access problem. I am able to enable external access now. Thank you!