topic Re: Site not secure in Integration, Extension & APIs

Site not secure

Mahamed_Qlik — Wed, 26 Jul 2023 05:42:21 GMT

I am getting Site not secure in web browser.

I have checked the certificates expiry on server and its not expired. also same thumbprint has been provided under QMC for proxy security section.

Re: Site not secure

Benoit_C — Wed, 26 Jul 2023 07:28:19 GMT

Hi @Mahamed_Qlik,

For this issue if you are using a custom certificate I would recommand to follow below article:

https://community.qlik.com/t5/Support-Updates/Qlik-Sense-Hub-and-QMC-with-a-custom-SSL-certificate/ba-p/1608077

In this article, it also explains which Qlik Sense logs to check in order to have more clues about what could happen.

Regards,
Benoit

Re: Site not secure

Mahamed_Qlik — Wed, 26 Jul 2023 08:50:07 GMT

Dear Benoit

I have already gone through the steps given and able to see the logs . Security log file is showing the same message too but security log is not showing todays date

Re: Site not secure

Benoit_C — Wed, 26 Jul 2023 09:05:26 GMT

Hi @Mahamed_Qlik,

Have you tried to restart the proxy services ? If you still have this very old logs, you could also try a Qlik Sense repair.

Regards,

Benoit

Re: Site not secure

Mahamed_Qlik — Wed, 26 Jul 2023 10:38:27 GMT

I can see there are two certificates are listed under personal, is it causing issue?

Re: Site not secure

Benoit_C — Wed, 26 Jul 2023 12:23:03 GMT

You should still have the self signed Qlik certificate + the custom certificate you've imported

See below article for more info:
https://community.qlik.com/t5/Official-Support-Articles/How-to-change-the-certificate-used-by-the-Qlik-Sense-Proxy-to-a/ta-p/1712773

Regards,
Benoit

Re: Site not secure

Mahamed_Qlik — Thu, 27 Jul 2023 04:12:57 GMT

I found one more thing is it is showing "Secure" while accessing hub inside server but on every client machine it is showing as insecure.

Re: Site not secure

Benoit_C — Wed, 23 Aug 2023 09:43:52 GMT

And what the logs are telling now in proxy security and proxy system ?

Re: Site not secure

Mahamed_Qlik — Thu, 24 Aug 2023 04:16:33 GMT

Can you help with the location of these log files? I will check.

Re: Site not secure

Benoit_C — Fri, 25 Aug 2023 08:41:59 GMT

You can find the logs here:

C:\ProgramData\Qlik\Sense\Log\Proxy\Trace

Re: Site not secure

Mahamed_Qlik — Sun, 27 Aug 2023 09:40:45 GMT

System proxy log :

"An unknown error occurred while processing the certificate↵↓A call to SSPI failed, see inner exception"

Security proxy log:

Couldn't find a valid ssl certificate with thumbprint xxxxxxxxxxxxxxxxxxxxxxxxxxx
Reverting to default Qlik Sense SSLCertificate
Set certificate 'CN=xx.xx.com

Re: Site not secure

Benoit_C — Tue, 29 Aug 2023 13:40:46 GMT

The error "Couldn't find a valid ssl certificate with thumbprint" would mean that your custom certificate is not valid.

I recommend you to check the 2 below articles:

https://community.qlik.com/t5/Official-Support-Articles/Couldn-t-find-a-valid-ssl-certificate-with-thumbprint-and-the/ta-p/1715455

https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Enterprise-on-Windows-Compatibility-information-for/ta-p/1715975

Regards,
Benoit

Re: Site not secure

Mahamed_Qlik — Wed, 30 Aug 2023 09:26:48 GMT

Hi Benoit,

If you are saying it is not valid then how it showing as secure while accessing hub in qlik server?

Re: Site not secure

Benoit_C — Wed, 30 Aug 2023 10:34:12 GMT

Hi Mahamed,

Maybe because it reverts to the Qlik self signed certificate.

Regards,
Benoit

Re: Site not secure

Mahamed_Qlik — Thu, 31 Aug 2023 05:31:24 GMT

Hi Benoit,

I resolved it by using correct server name instead of using server alias name.

Now I am able to see secured site on my client machine.

But, this is resolved on my client machine only, other client machine is still showing insecure site, any idea on this?

Re: Site not secure

Benoit_C — Fri, 01 Sep 2023 09:37:28 GMT

Hello Mahamed,

It's having the insecure error on other machine using the correct server name ?

When you are looking at the certificate used in the browser (from the client machine where now it's working), is that the self signed Qlik certificate ?

Re: Site not secure

Mahamed_Qlik — Sun, 03 Sep 2023 04:49:54 GMT

Ok. Let me explain it more clearly:

1) Before using correct server name instead of using server alias name-

- On every client machine certificate was showing as invalid.

- On server it was showing as valid certificate.

2) After using correct server name instead of using server alias name
- Some of the client machine is showing valid certificate and some of them still showing invalid certificate.

- On server it is showing valid certificate.

Hopefully it is more simple and clear for you?

Note- Now highlighted part is the issue.

Re: Site not secure

Benoit_C — Mon, 04 Sep 2023 15:54:25 GMT

So, for working and no working users, if you check in the browser the certificate, is that the same ?