A newly installed Qlik Data Gateway for Direct Access stays disconnected.
The log files read:
"System.Net.WebSockets.WebSocketException (0x80004005): Unable to connect to the remote server
---> System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
---> System.Security.Authentication.AuthenticationException: The remote certificate was rejected by the provided RemoteCertificateValidationCallback.
at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)"
and
[Service] [DEBUG] Verifying root certificate with the CA bundle "C:\ProgramFiles\Qlik\ConnectorAgent\caBundle\qcg_ca_bundle.pem"
Resolution
Remove the software and reinstall it without running the command “connectoragent qcs set_config --ca_bundle_path path-to-ca-bundle-file”
The CA Bundle is needed only in very specific scenarios, as specified in Setting the CA bundle (source, Qlik Help):
Who needs to set the CA bundle?
The CA bundle only needs to be set if you are:
- A Qlik Cloud Government customer
- A Qlik Cloud commercial customer using a security appliance that acts as a proxy and replaces the certificate information received from the Internet with its own CA root certificates
Configuring the bundle unnecessarily will result in connection failures.
If a CA Bundle is indeed needed, verify it is configured correctly.
Cause
Setting up a CA Bundle when not needed might break connections.
Environment
- Qlik Cloud Analytics
- Qlik Data Gateway
