topic Qlik NPrinting Certificate Issue in Qlik NPrinting

Qlik NPrinting Certificate Issue

balajibc64 — Sun, 31 Dec 2023 07:16:35 GMT

Hi, we are using Qlik Sense with Qlik NPrinting. When we try to access the Qlik Nprinting URL its showing warning like "your connection is not private". Then I opened the developer tool and checked under security tab, then its shows

"The page is not secure (broken HTTPS)" Below

Certificate - Subject Alternative name missing

Certificate - missing (here its showing like "err_cert_comm_name_invalid") .

any one suggest pls?

Note: Because of this first time URL is not working, then from advance If I clicked the URL then it is working.

Both certificate installed at same day in the Qlik Sense and Qlik NPrinting.

Re: Qlik NPrinting Certificate Issue

Anil_Babu_Samineni — Sun, 31 Dec 2023 08:31:08 GMT

@balajibc64 Subject alternative is really important. Can you see the certificate and check if any values or host details available in Subject alternative.

Hope your certificate created towards webserver?

Re: Qlik NPrinting Certificate Issue

balajibc64 — Sun, 31 Dec 2023 09:19:56 GMT

Hi @Anil_Babu_Samineni Yes webserver only. Can you pls suggest where and how to check subject alternative?

Re: Qlik NPrinting Certificate Issue

Anil_Babu_Samineni — Mon, 01 Jan 2024 06:16:27 GMT

@balajibc64 This is related to similar: https://community.qlik.com/t5/Official-Support-Articles/ERR-CERT-COMMON-NAME-INVALID-when-using-3rd-party-certificate/ta-p/1715606

Please see if that helps .

Re: Qlik NPrinting Certificate Issue

balajibc64 — Mon, 01 Jan 2024 06:42:12 GMT

Hi @Anil_Babu_Samineni Thank you. I will check.

Quick Question:

This is needs to be done in Qlik NPrinting Server only right?

And I have checked while accessing the Qlik NPrinting Server URL,

"Attackers might be trying to steal your information from YYY.XXX.com.qa"

NET::ERR_CERT_AUTHORITY_INVALID

so for this we need to handle Subject alternative is important right ?

Whether I need to recreate a new certificate for create Subject alternative (or) using existing one itself enough ? Please suggest.

Re: Qlik NPrinting Certificate Issue

Anil_Babu_Samineni — Mon, 01 Jan 2024 06:52:18 GMT

@balajibc64 I wonder if you can modify the existing one because the communication needs to be send.

It doesn't matter if that is connected to tool (Because it is same for almost all FQDN hosts like your nprinting).

So, I would recommend to recreate and use it and let's see how that is helping you.

PS: Subject alternative depends how your certificate management configured in the backend (Meaning, in Webserver template if that is optional when they create it, I won't suspect this is due to this).

Re: Qlik NPrinting Certificate Issue

balajibc64 — Mon, 01 Jan 2024 07:18:12 GMT

Hi @Anil_Babu_Samineni Oops got confused. Because I can't try directly in Production. Below are the details I found,

1. Logon into Qlik NPrinting server.

2. Looked the existing certificate via mmc

3. Under Certificate, Details tab I'm seeing Subject value. This subject value is SWXXXD0AAAS0003 (Our Qlik NPrinting Server name).

4. There is no "Subject Alternative Name" under this tab.

5. Now when I'm tried to access the Qlik NPrinting URL, facing this NET::ERR_CERT_AUTHORITY_INVALID.

I notice this message as per your given link,

Your connection is not private

Attackers might be trying to steal your information from fltapsaaa.asdfgsdirways.com.qa (for example, passwords, messages, or credit cards)

NET::ERR_CERT_AUTHORITY_INVALID

Pls note: I trying to resolve this issue, because in Qlik Sense dashboard, On Demand button is not working. so that trying to resolve this certificate issue.

Re: Qlik NPrinting Certificate Issue

balajibc64 — Tue, 02 Jan 2024 11:24:36 GMT

Hi @Anil_Babu_Samineni any suggestion

Hi @Lech_Miszkiewicz Tagging you, can you pls guide if possible .

Re: Qlik NPrinting Certificate Issue

balajibc64 — Tue, 02 Jan 2024 11:33:52 GMT

Hi @Anil_Babu_Samineni Quick Question, As you mentioned " would recommend to recreate".

you mean re-create a certificate ? If yes, is this via Qlik Sense QMC --> certificate like this way?

Re: Qlik NPrinting Certificate Issue

Anil_Babu_Samineni — Tue, 02 Jan 2024 14:16:14 GMT

@balajibc64 Sorry for the late, I am away yesterday 🙂

Anyway, this sounds like this is something somebody trying to access your company address. I would recommend checking with your provider (Like, Webserver from where you ordered or using this template to create certificates).

You may be looking only in Qlik sense, my intention to check from N-Printing side as well, it means when you create private key (There are many ways to create certificate), it could check the box and what if, in case if you create again the certificate in Qlik sense via QMC and also the same from Qlik N-Printing.

Once you download the certificate in CER, please follow like this.

Rename the extension of the file generated (.cer) to .crt (Ex, xyz.crt)
Copy the certificate “xyz.crt” and the related private key “NPrinting.key” into the appropriate folders:

For the NewsStand: %ProgramData%\NPrinting\newsstandproxy\.

Typical path is C:\ProgramData\NPrinting\newsstandproxy\.

For the Qlik NPrinting web console: %ProgramData%\NPrinting\webconsoleproxy\.

Typical path is C:\ProgramData\NPrinting\webconsoleproxy.

Change both proxy configuration files to refer to the new certificate file:
1. Edit the Newsstand proxy configuration file: ProgramData%\NPrinting\newsstandproxy\app.conf

Uncomment by removing the # and change or add the following lines to:

http.sslcert=${ProgramData}\NPrinting\newsstandproxy\ xyz.crt (Change the certificate file name if necessary.)

http.sslkey=${ProgramData}\NPrinting\newsstandproxy\NPrinting.key. (Change the private key file name if necessary.)

2. Edit the Qlik NPrinting web console proxy configuration file:

%ProgramData%\NPrinting\webconsoleproxy\app.conf

Uncomment by removing the # and change or add the following lines to:

http.sslcert=${ProgramData}\NPrinting\webconsoleproxy\ xyz.crt (Change the certificate file name if necessary.)

http.sslkey=${ProgramData}\NPrinting\webconsoleproxy\NPrinting.key (Change the private key file name if necessary.)

You must stop and restart the Qlik N-Printing web engine service because new certificates are read only during the service start-up process.

/* I noticed from your statement for this,

3. Under Certificate, Details tab I'm seeing Subject value. This subject value is SWXXXD0AAAS0003 (Our Qlik N-Printing Server name).

Make sure, Subject valid with your FQDN as well, an example it should be community.qlik.com if this is your N-Printing URL to whitelist.

Please do let us know if you need more information or not worked.

Re: Qlik NPrinting Certificate Issue

balajibc64 — Tue, 02 Jan 2024 18:15:29 GMT

Hi @Anil_Babu_Samineni Sure I will check. Below are the things I did,

1. I recreated Qlik Sense certificate from QMC and copy the same certificate into Qlik NPrinting server. I tried to install the same. But no luck 😞

I have few questions,

1. Whether I need to create Qlik Sense and Qlik NPrinting certificate again?

2. Both the certificate are same.

3. I'm aware of Qlik Sense certificate via QMC, but how to generate Qlik NPrinting Certificate?

4. Where and how to check and give "Subject Alternative Name". ?

Please suggest.

Moreover I'm facing issue, when I access to On Demand button in Qlik Sense dashboard, its showing error "unable to connect server". When I trouble shoot the error, I notice this error via browser tool. So If resolve this certificate issue may be this issue also resolve.

Re: Qlik NPrinting Certificate Issue

balajibc64 — Tue, 02 Jan 2024 18:48:06 GMT

Hi @Anil_Babu_Samineni one more thing, I tired to access Qlik Sense dashboard via Qlik Sense Hub. While clicking On Demand button very first time, its showing error "unable to connect server".

Then I looked the developer tool, its showing error ERR_CERT_AUTHORITY_INVALID. Then I noticed accessing URL is "https://XXXXX.XXXXYYways.com.qa"

But from security tab, This page is not secure (broken HTTPS). I checked the certificate from same browser tool,

Common Name (CN) : ServerName.qr.qrgrp.local

Organization (O) : <Not Part Of Certificate>

Organizational Unit (OU) :<Not Part Of Certificate>

pls suggest.

Re: Qlik NPrinting Certificate Issue

Anil_Babu_Samineni — Tue, 02 Jan 2024 19:57:25 GMT

@balajibc64 Interesting, does it mean you have installed both Qlik sense and N-Printing in same server?

For N-Printing certificate I have shared already steps in my previous post. If you have single DNS or one engine for Qlik N-Printing, you can ignore the SAN. Could be in general all the certificate error effects the communication gateway issue.

For second part,

Common Name (CN) : ServerName.qr.qrgrp.local

Organization (O) : <Not Part Of Certificate>

Organizational Unit (OU) :<Not Part Of Certificate>

All the above it is good to check with your IT team who can help, otherwise it is a good reference of your meme to see what this certificate is about why did we created (Best practice to have them as always to recall).

HTTPS majority is problem for open-source DNS and certificate blocks.

So, Please follow the instruction i have given and see if that helps.

Re: Qlik NPrinting Certificate Issue

balajibc64 — Wed, 03 Jan 2024 05:09:15 GMT

Hi @Anil_Babu_Samineni No. both are different server. Qlik Sense is in one server and Qlik NPrinting is another server. And Qlik View is another 2 servers.

Re: Qlik NPrinting Certificate Issue

PrashantSangle — Wed, 03 Jan 2024 05:23:39 GMT

@balajibc64 , I gone through all your & Anil's messages but not understood where you are getting this error message ? can you provide some screenshot?

I saw message where you mention about adding qlik sense certificate in nprinting but do you have SSL to secure your nprinting URL?

Can you explain all above query? we will solve one by one.

Regards,

Prashant Sangle

Re: Qlik NPrinting Certificate Issue

balajibc64 — Wed, 03 Jan 2024 05:35:20 GMT

Hi @PrashantSangle Sure I will explain. Problem in my organization secured one so not able to upload image from my end. sorry for that.

Let me explain again here,

Issue: we are accessing the Qlik Sense dashboard via QS Hub. In that dashboard we created one On demand button to download the reports. When we tried to download the reports like pdf, html, Doc etc. Facing error like "Unable to connect server". That time I go to browser tool, I noticed the error ERR_CERT_AUTHORITY_INVALID.

This is the issue.

Re: Qlik NPrinting Certificate Issue

PrashantSangle — Wed, 03 Jan 2024 05:50:42 GMT

so you are trying on demand report generation.

have you gone through below URL. It will give in depth idea on how to set up on demand report generation

https://help.qlik.com/en-US/nprinting/May2023/Content/NPrinting/On-Demand/Create-Report-On-Demand-QS.htm

if yes, my next question is

are you able to access qlik nprinting from same server where your qlik sense is hosted?

Regards,

Re: Qlik NPrinting Certificate Issue

balajibc64 — Wed, 03 Jan 2024 06:00:11 GMT

Hi @PrashantSangle Yes Already done those steps. Facing issue only trying to export only.

Yes Now I tried access my Qlik NPrinting URL from Qlik Sense server. Its working, but same certificate error showing in browser tool.

Re: Qlik NPrinting Certificate Issue

PrashantSangle — Wed, 03 Jan 2024 06:31:21 GMT

so it means you need SSL for your nprinting URL..

Do you have SSL certificate for nprinting? If yes then follow below URL on how to set up SSL for nprinting.

https://help.qlik.com/en-US/nprinting/May2023/Content/NPrinting/DeployingQVNprinting/Installing-ssl-certificates.htm

Regards,

Prashant Sangle

Re: Qlik NPrinting Certificate Issue

balajibc64 — Wed, 03 Jan 2024 06:49:37 GMT

Hi @PrashantSangle Yes already created SSL and pasted in this path.

Quick Question: you mentioned "SSL for your nprinting URL". So when I create a .crt file, I gave only server name but shall i need to give entire url? like (servername.gr.grplocal)

Also my Qlik NPrinting URL is different (it wont have any IP and server name) and Server name is different.

Shall I recreate a this .cert file ? using SSL ? If yes, this needs to be create in Qlik NPrinting only right? because Qlik View also we are using.

Please suggest.