topic Re: Qlik Replicate Server Linux SSL - generate pem for replacing self-signed in Qlik Replicate

Qlik Replicate Server Linux SSL - generate pem for replacing self-signed

lguevara — Mon, 31 Mar 2025 15:41:18 GMT

Hi,

The client want to Replacing the self-signed SSL.

they generated file.csr and keystore.jks in the server and send this to CA Local for signed.

Please some advice to generate this files in based the files before.

Thanks

Steve_Nguyen — Mon, 31 Mar 2025 15:52:18 GMT

as stated in the user guide :

agent-ca.pem - The CA certificate ,,, this would be your CA certificate, if your company have it name different or another format. Replicate would need it to be in pem format and rename to match agent-ca.pem
agent-certificate.pem - The public certificate ,,, same here as well : if your company have it name different or another format. Replicate would need it to be in pem format and rename
agent-private-key.pem - The private key data ,,, same here as well : if your company have it name different or another format. Replicate would need it to be in pem format and rename
agent-private-key-passphrase.dat - The private key passphrase ,,, you would just need to edit this file and put your private key password, as stated in user guide .. When the Replicate service is restart, the plain key will then be one way hash.

lguevara — Mon, 31 Mar 2025 16:32:16 GMT

and if they dont private-key-passphrase, in the file .dat

should only place?

/clear:

thanks.

Steve_Nguyen — Mon, 31 Mar 2025 17:00:43 GMT

@lguevara Replicate SSL certificate need to have private key, it will not works without private key password.