4 Replies Latest reply: Jan 2, 2018 12:25 PM by Pablo Labbe RSS

    Https hub access with green adress bar

    Franck Robert

      Hi,

       

      We are trying to spread access to the hub through httpS protocol.

      For the moment, when trying to reach httpS://server/hub , users have a message indicating that website is not secured and that is not recommended to continue. Adress bar is turning red if we continue.

       

      Is anyone able to provide us a clear procedure not to have this warning message, and to have a green adress bar ?

      - we do not have further competencies about proxies or certificates (....)

      - some procedure found in this forum result in a crash of the QMC (with no other way to proceed than to restore a VM)

       

      Thank you so much for your help.

      Franck

        • Re: Https hub access with green adress bar
          Ewerton Tavares

          Hello, I solved this problem by simply enabling in the proxy qmc the enable enable http option and redirecting port 80 to 8081. I make my users connect via http by this port. It even solves the Ipad errors which was my main problem with the certificates.

            • Re: Https hub access with green adress bar
              Franck Robert

              Thanks a lot for your answer.

              Http is easy to achieve. The aim is to use httpS.

              There may be something wrong because no one seems to be able to use this protocol.

              In my case, I have to restore VM after trying to deal with it.

              Installing/registering/ removing (...) certificates cause the QMC not to be accessible, even after a restore of its posgresql database.

               

              If anyone can help about httpS

               

              Le 26 déc. 2017 à 23:11, Ewerton Tavares <qcwebmaster@qlikview.com<mailto:qcwebmaster@qlikview.com>> a écrit :

               

               

                       

                • Re: Https hub access with green adress bar
                  Herbert Zangarini

                  Maybe this can help you

                   

                  Certificate: How to

                   

                  1- How to generate a random appid
                  2- How to generate a self signed certificate
                  3- How to convert certificate to PFX file
                  4- How to install a certificate
                  5- How to get certificate thumbprint (hash)
                  6- How to check all installed certificates with Powershell
                  7- How to bind a certificate to a port with command prompt
                  8- How to bind a certificate to a port with command Powershell

                  1- How to generate a random appid

                   

                  https://www.guidgenerator.com/

                   

                  User-added image

                   

                  Click on Generate !

                   

                  2- How to generate a self signed certificate

                   

                  http://www.selfsignedcertificate.com/
                  Download both .cert and .key files

                   

                  User-added image

                   

                  3- How to convert certificate to PFX file

                   

                  https://www.sslshopper.com/ssl-converter.html
                  Download your .key and .cert files, and select PFX/PKCS#12 as output format
                  Click on convert and download the result file

                   

                  User-added image

                   

                  4- How to install a certificate

                   

                  Simply double click on the PFX file and select the personal store

                   

                  User-added image

                   

                  User-added image

                   

                  5- How to get certificate thumbprint (hash)

                   

                  Right click on the certificate and go to Details > <All> > Thumbprint

                   

                  User-added image

                   

                  6- How to check all installed certificates with Powershell

                   

                  PS C:\Users\Administrator> netsh http show sslcert

                   

                  SSL Certificate bindings:
                  -------------------------

                   

                      IP:port                 : 0.0.0.0:443
                      Certificate Hash        : 3a384a3xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
                      Application ID          : {b2cb5c3b-2ddf-45b9-b3e7-46c651269994}
                      Certificate Store Name  : (null)
                      Verify Client Certificate Revocation    : Enabled
                      Verify Revocation Using Cached Client Certificate Only    : Disabled
                      Usage Check    : Enabled
                      Revocation Freshness Time : 0
                      URL Retrieval Timeout   : 0
                      Ctl Identifier          : (null)
                      Ctl Store Name          : (null)
                      DS Mapper Usage    : Disabled
                      Negotiate Client Certificate    : Disabled

                   

                     

                   

                  7- How to bind a certificate to a port with command prompt

                   

                  c:> netsh http add sslcert ipport=0.0.0.0:4799 certhash=55ab2929fbd585ad3ad817f25aee025a51a2ffb5  appid={e23183e3-c874-467a-bd39-d110cd066f1f}

                   

                   

                  8- How to bind a certificate to a port with command Powershell
                   
                  PS C:\Users\Administrator> netsh
                  netsh>http
                  netsh http>add sslcert ipport=0.0.0.0:4799 certhash=55ab2929fbdxxxxxxxxxxxxxxxxxx  appid={e23183e3-xxxxxxxxxxxxxxxxxxxx}

                   

                  SSL Certificate successfully added

                   

                  netsh http>exit
              • Re: Https hub access with green adress bar
                Pablo Labbe

                When applicable please mark the appropriate replies as CORRECT. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads as HELPFUL if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads as HELPFUL if you feel additional info is useful to others