topic Re: HTTPS- Certificat in Qlik Replicate

HTTPS- Certificat

Finnova — Wed, 03 Jan 2024 06:57:45 GMT

Hi, we have a Problem with an HTTPS-Certificat.

I have installed an HTTPS certificate (TLS) with CommonName *.shr.company.ch.

This applies, for example, to the Qlik Replicate UI link: https://test.shr.company.ch [/attunityreplicate].

I have also already imported the certificate and connected with the appid.

This works so far. However, forwarding to the hostname is now the problem.

Now the certificate is invalid, because I will be redirected directly to https://hostname[/attunityreplicate].

First support says there should be a serviceconfiguraiton file located in the replicate/data directory. But there's not.

Does anyone have a different solution?

Re: HTTPS- Certificat

john_wang — Wed, 03 Jan 2024 13:35:28 GMT

Hello @Finnova ,

Thanks for reaching out to Qlik Community!

Not sure if you are meaning these two files. The ServiceConfiguration.xml and ServerConfiguration.xml files have been deprecated from Replicate version 2023.5. Operations that were previously performed by editing these files are now performed using the Replicate CLI command. A similar article: Regarding serviceconfiguration.xml file.

Hope this helps.

John.

Re: HTTPS- Certificat

Finnova — Wed, 03 Jan 2024 13:46:36 GMT

That explains the missing files, thank you.
However, I always lack the information on how to solve the forwarding of the website so that my HTTPS wildcard certificate works.

Re: HTTPS- Certificat

DesmondWOO — Thu, 04 Jan 2024 03:50:38 GMT

Hi @Finnova ,

Please try following command:

repuictl configuration set --address <your hostname>

Regards,
Desmond

Re: HTTPS- Certificat

Finnova — Fri, 05 Jan 2024 10:00:25 GMT

In this case or when I try the cmd repuictl configuration show I become the following request:

Operation failed (reason: REPO-E-FACSQLREP, Failed to connect to SQLite repository 'D:\Program Files\Attunity\Replicate\data\GlobalRepo.sqlite'.)
Command ShowHostConfigurationCommand failed.
REPO-E-FACSQLREP, Failed to connect to SQLite repository 'D:\Program Files\Attunity\Replicate\data\GlobalRepo.sqlite'.

In summary:

My Version: 2021.11.0.469
ServiceConfiguration.xml does not exists
GlobalRepo.sqlite does not exists

What I have is a ServersConfiguration.xml. Can I configurate there? If so, do you have an example?
I have also tried via cmd Aemctl.exe. But this application also does not exists.

Re: HTTPS- Certificat

DesmondWOO — Fri, 05 Jan 2024 10:51:25 GMT

Hi @Finnova ,

Replicate v2021.11.0.469 should have ServersConfiguration.xml and ServiceConfiguration.xml under data folder.

If both Replicate Server and Replicate UI are on the same machine, the content of these two files should be as below:

ServersConfiguration.xml

<?xml version="1.0" encoding="utf-8"?>
<ServersConfiguration xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<Servers>
<ServerData name="local" host="127.0.0.1" port="3552" description="Local Attunity Replicate Server" />
</Servers>
</ServersConfiguration>

ServiceConfiguration.xml
<ServiceConfiguration url="https://<your hostname>:443/attunityreplicate;http://<your hostname>:80/attunityreplicate" allowUnsafeProtocols="false" />

** Please change <your hostname> according to your network configuration.

Please note that Replicate v2021 has reached its end of support date and it is unusual that these two files are missing. I suggest reinstalling the supported version. For details, please check the release note.

Regards,
Desmond

Re: HTTPS- Certificat

Alan_Wang — Fri, 05 Jan 2024 20:57:59 GMT

Hi @Finnova

Did you install the data directory in a separate location from the base installation? Trying locating the ServiceConfiguration.xml file from the data directory that was designated as the separate location. It is recommended to ensure the Replicate services are turned off before editing these configuration files.

Re: HTTPS- Certificat

Finnova — Wed, 10 Jan 2024 13:26:58 GMT

We updated now Replicate to 2023.5.
We found another data folder on a other location on the same host with a serviceconfiguration.xml.
Also we ad a serviceconfiguration.xml to the data folder in base location with following configuration:
<ServiceConfiguration url="https://test.shr.company.ch:443/attunityreplicate;http://test.shr.company.ch:80/attunityreplicate" allowUnsafeProtocols="false" />

The certificate is still invalid, because of the forwarding to https://hostname[/attunityreplicate].

Server und service was restartet.

Any other ideas?

Re: HTTPS- Certificat

Alan_Wang — Wed, 10 Jan 2024 16:56:01 GMT

As John has stated, in Replicate 2023.5, the two files have been depreciated and repctl CLI commands should be used to edit any host address configurations. Here is the sample configuration settings that can be adjusted with the CLI commands.

--address ""
--http_port "80"
--https_port "443"
--root_url "attunityreplicate"
--user_timeout "5"
--domain "mydomain.com"
--ad_default_container ""
--authentication_method "SSO"
--static_http_headers
--rest_http_headers
--use_strict_same_site_cookie "False"

Re: HTTPS- Certificat

Finnova — Wed, 17 Jan 2024 09:38:05 GMT

Thanks, it was a little confusing because the data directory is in a different location.

I have now set --address "hostname".
The forwarding still happens after a service restart and the certificate is therefor not valid.

Re: HTTPS- Certificat

Alan_Wang — Fri, 12 Jan 2024 20:40:07 GMT

When a data directory is installed in a separate location from the base install, this file path needs to be added to the repctl command.

repuictl -d "Path to Data location" configuration set --address <your hostname>

Re: HTTPS- Certificat

deepaksahirwar — Sat, 13 Jan 2024 14:02:58 GMT

Dear @Finnova ,

Let’s address these issues one by one:

GlobalRepo.sqlite:

The error message indicates that Qlik Replicate is unable to connect to the SQLite repository at 'D:\Program Files\Attunity\Replicate\data\GlobalRepo.sqlite’. This could be due to the file being corrupted or not existing. If the file is corrupted, you might be able to resolve the issue by using a SQLite browser to open the GlobalRepo.sqlite file, locate the entry “AppHostConfiguration” and change its value to 2. If the file does not exist, it might have been moved or deleted.

You might need to recreate it or restore it from a backup.

ServiceConfiguration.xml:

As of Qlik Replicate version 2023.5, the ServiceConfiguration.xml and ServerConfiguration.xml files have been deprecated23. Operations that were previously performed by editing these files are now performed using the Replicate CLI command

In your version 2021, the ServiceConfiguration.xml file should exist. If it’s missing, you might need to create it or restore it from a backup.

If you found our response useful, we kindly ask you to click on “Accept as Solution”. This will aid other users in finding the answer more effortlessly.

Thank you! 😊

Regards,
Deepak

Re: HTTPS- Certificat

Finnova — Mon, 15 Jan 2024 06:33:56 GMT

That's exactly what I've already done.

But he forwarding still happens after a service restart and my certificate with the wildcard-certificat is therefore not accepted.

Re: HTTPS- Certificat

Finnova — Wed, 17 Jan 2024 10:08:50 GMT

In this case, it is also helpful to know:
- Data directory is not in the base directory: repuictl -d "Other directory" configuration ...
- The .pem files must be deleted in this data/ssl directory.

It works now. Thank you for your tips

Re: HTTPS- Certificat

SushilKumar — Fri, 19 Jan 2024 01:52:27 GMT

Hello team,

If our response has been helpful, please consider clicking "Accept as Solution". This will assist other users in easily finding the answer.

Regards,

Sushil Kumar