Allow for CA Signed Certificates in Qlik Sense interprocess communication
I have a client whose central IT is saying that the internal Qlik Sense Self Signed Certificates are a vulnerability and must be replaced with signed certificates or removed.
We have replaced the Proxy Certificate with a CA Signed one but they want the others signed.
At the moment there is no way of doing this. We need a way.
The main use case for the self-signed certificates is inter-service communication and when you expand to multiple nodes. Unfortunately, they cannot be changed.
What you can do if the concern is external parties hitting the servers with the certificates is:
1. Don't share the self-signed certificates 2. Block direct access to service ports for incoming external connections because those require the certificates.
