Trusted SSL websocket

Objective

• Override self-signed certificate with a trusted SSL certificate

Background

• This is nice using the print-server approach to avoid manual certificate installation on each client when using HTTPS

Prerequisites

• SSL certificate from a trusted CA

Steps

Windows

1. Install QZ Tray

2. Install OpenSSL

3. Override self-signed cert

   Open an administrative cmd prompt

   cscript "%PROGRAMFILES%\QZ Tray\auth\windows-keygen.js" "%PROGRAMFILES%\QZ Tray" install "" "" "cert.pem" "privkey.pem" 

4. Restart QZ Tray

   If scripting the process, use the below command

   wmic.exe process where "Name like '%java%' and CommandLine like '%qz-tray.jar%'" call terminate

macOS

1. Install QZ Tray

2. Override self-signed cert

   sudo /Applications/QZ\ Tray.app/auth/apple-keygen.sh install "" /etc/qz-tray/certs/cert.pem /etc/qz-tray/certs/privkey.pem

3. Restart QZ Tray

Linux

1. Install QZ Tray

2. Override self-signed cert

   sudo qz-tray-2.0.6.run -- -y "" /etc/qz-tray/certs/cert.pem /etc/qz-tray/certs/privkey.pem