Qlik Replicate Server Linux SSL - generate pem for replacing self-signed

[lguevara]

Hi,

The client want to Replacing the self-signed SSL.

they generated file.csr and keystore.jks in the server and send this to CA Local for signed.

Please some advice to generate this files in based the files before.

• agent-ca.pem - The CA certificate
• agent-certificate.pem - The public certificate
• agent-private-key.pem - The private key data
• agent-private-key-passphrase.dat - The private key passphrase

Thanks

[Steve_Nguyen · Accepted solution]

@lguevara 

as stated in the user guide :

• agent-ca.pem - The CA certificate ,,, this would be your CA certificate, if your company have it name different or another format. Replicate would need it to be in pem format and rename to match agent-ca.pem
• agent-certificate.pem - The public certificate ,,, same here as well :  if your company have it name different or another format. Replicate would need it to be in pem format and rename 
• agent-private-key.pem - The private key data ,,, same here as well :  if your company have it name different or another format. Replicate would need it to be in pem format and rename 
• agent-private-key-passphrase.dat - The private key passphrase ,,, you would just need to edit this file and put your private key password, as stated in user guide .. When the Replicate service is restart, the plain key will then be one way hash.

[lguevara]

Hi @Steve_Nguyen,

and if they dont private-key-passphrase, in the file .dat 

should only place?

 /clear:

thanks.

[Steve_Nguyen]

@lguevara Replicate SSL certificate need to have private key, it will not works without private key password.