SYS,GENERAL_EXCEPTION,The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel after adding SSL

[desmondchew]

I have successfully added SSL certificate into Qlik Replicate server. So that the browser know that the SSL certificate is trusted and recognized.

However I hit into an error.

SYS,GENERAL_EXCEPTION,The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel

Please see screenshot attached. Any help is much appreciated.

Thank you.

[Steve_Nguyen · Accepted solution]

try below

https://community.qlik.com/t5/Official-Support-Articles/Qlik-Replicate-console-shows-a-Could-not-est...

[desmondchew]

My apologies. I meant that we are replacing the self-signed certificate in Windows using this link 

https://help.qlik.com/en-US/replicate/May2023/Content/Replicate/Main/Security/set_up_server_https_su...

[Steve_Nguyen]

@desmondchew 

1. is this a Windows UI connecting to a Linux Replicate server or Windows UI for Windows server?

2. did you verify that the bind certificate match the URL hostname ? 

3. is the certificate you are using is a certificate from digisign or known CA ? 

[desmondchew]

1. is this a Windows UI connecting to a Linux Replicate server or Windows UI for Windows server?

This is a Windows UI connecting to Windows replicate QDI server.

2. did you verify that the bind certificate match the URL hostname ? 

Yes it's a matching

3. is the certificate you are using is a certificate from digisign or known CA ? 

The certificate is issued by our IT infrastructure department. It is CA, if I am not mistaken as I could see the wording CA.

So, I followed your guide and remove all the files inside the "ssl\data" folder. Then I restarted the QDI it showed that the SSL is working.

Desmond

[Steve_Nguyen]

@desmondchew ,, so the issue is now resolve ?

[desmondchew]

Yes we are not seeing the SSL certificate error. But it's strange that we need to remove the files *.pem under ssl\data folder to make it work.

Thanks

Desmond