topic Re: Issue creating SSL cert for web connectors in Integration, Extension & APIs

Issue creating SSL cert for web connectors

mattdetwiler — Mon, 26 Feb 2024 17:53:56 GMT

We recently migrated to Nov 2023 version from an old May 2020 release. I'm trying to reconfigure the web connectors in a multi node environment. Everything went fine with the web connector install and they are working from the central node. Our 2nd node seems to be failing when trying to connect.

I've gone through most of the setup suggestions I could find for the web connector deploy.conf file but I'm not having any luck. our old site didn't use SSL but this was the last thing I was going to try.

I've tried everything in this article: https://help.qlik.com/en-US/connectors/Subsystems/Web_Connectors_help/Content/Connectors_QWC/Administer/SSL_certificate_authentication.htm

When I go to bind the cert to port 5555 I'm getting a "parameter incorrect" error (on the command line)

I've also tried going into Netsh first and running the command but it still fails with the same error.

I've tried writing the command a few different ways and swapping out different parameters but I'm not having any luck.

Here's the command I'm trying to use. I'm wondering if the GUID for web connectors could be wrong?
C:\windows\system32\netsh http add sslcert ipport=0.0.0.0:5555 certstorename=Root certhash=?C44C54B23C2FFAA8CFF3B74ACFF4D894D53F45F6 appid={004FC337-C805-4623-8E5B-B2FCE18F0719}

Re: Issue creating SSL cert for web connectors

Ray_Strother — Mon, 26 Feb 2024 19:12:30 GMT

Hello ,

Please make sure you updated the server in the host.config file and stated in the instructions.

https://help.qlik.com/en-US/connectors/Subsystems/Web_Connectors_help/Content/Connectors_QWC/Administer/SSL_certificate_authentication.htm?_ga=2.232765471.1018693047.1708961855-396670997.1640699740&_gac=1.249720308.1708029124.CjwKCAiAibeuBhAAEiwAiXBoJCsbsGZtFO0QfBGy00ZO4B7mOCb8xfrUG0Z4F4vLYgHJ6XuxTmSQiRoC9OAQAvD_BwE

Re: Issue creating SSL cert for web connectors

mattdetwiler — Mon, 26 Feb 2024 19:31:47 GMT

Do you mean deploy.config? I wasn't seeing a host.,config but my name in the deploy file is the same as the host/CA I used for the cert.

But I guess I should also ask, should that be the www site address or is it ok to have the local machine name/domain since they are both on site? It is currently set to the local FQDN

Re: Issue creating SSL cert for web connectors

mattdetwiler — Tue, 27 Feb 2024 15:20:02 GMT

So this morning I sat down and gave it a good look. Even though I had checked for any special characters somehow a ? slipped into the beginning of the cert thumbprint.

This is super strange since I copied it directly from the command line (and it's not in my text file).

After removing the ? the cert was added properly.

Re: Issue creating SSL cert for web connectors

shaan007 — Fri, 24 Jan 2025 06:51:05 GMT

I am having the same issue. But there is no character '?' in my hash. I followed all the instructions correctly.

netsh http add sslcert ipport=0.0.0.0:5555 certstorename=Root certhash=‎4925AE174EF2CFE6976DC4A7DD2C7F6462100EE2 appid={004FC337-C805-4623-8E5B-B2FCE18F0719}

Note: in MMC , for the step >> Move the certificate from Personal > Certificates to Trusted Root Certification Authorities > Certificates I cut and paste the certificate from Personal to TRC.

Help needed.

Re: Issue creating SSL cert for web connectors

shaan007 — Fri, 24 Jan 2025 06:54:12 GMT

This is fixed. there was a space when I copied the string to the command prompt window.

certhash=" "4925AE174EF2CFE6976DC4A7DD2C7F6462100EE2