Re: Getting issue in print server setup.

[Tres Finocchiaro]

Hi,

Generally, the certificate that you have generated will not be trusted by a machine until it's distributed to machines needing it.

What's peculiar is that the message you've shared says "ERR_CONNECTION_TIMED_OUT", I'd expect the handshake to fail.

Is QZ Tray running?  Is the DNS name twine-work.com valid and does it point t the machine running QZ Tray?

- Tres.Fin...@gmail.com

On Sun, Nov 10, 2019 at 6:33 AM <dadhan...@gmail.com> wrote:

Hello,

I have tried to setup print server but its giving "WebSocket connection to 'wss://twine-work.com:8181/' failed: Error in connection establishment: net::ERR_CONNECTION_TIMED_OUT" error. I have generated certificate for twine-work.com using windows command promt.

--
You received this message because you are subscribed to the Google Groups "qz-print" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qz-print+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qz-print/2c61dbf3-b1d0-4c4e-a78b-10a62c577550%40googlegroups.com.

[chugh....@gmail.com]

I am having the same error as the creator of this thread. From Tres's response , I have validated the following:

• QZ Tray Running - Yes
• The DNS in question IS Valid and expires 07/2021
• Yes QZ-Tray is being pointed at it ( I confirmed it by unsecured WS connection, however WSS fails)
• In addtion QZ Tray was installed using the right SSL properties:

cscript "%PROGRAMFILES%\QZ Tray\auth\windows-keygen.js" "%PROGRAMFILES%\QZ Tray" install "qz2.accents.pw" "" "C:\HomeAccents\encrypt_authority\full-chain-cert.pem" "C:\HomeAccents\encrypt_authority\private-key.pem"

Creating PKCS12 keypair (this requires openssl)...

 - [success] Creating PKCS12 keypair

Creating keystore for wss://qz2.accents.pw (this could take a minute)...

 - [success] Converting trusted keypair to Java format

Writing !install/qz-tray.properties...

 - [success] Shutting down any QZ Tray instances

 - [success] Writing SSL properties file: !install/qz-tray.properties

Please advice

On Monday, November 11, 2019 at 11:01:01 AM UTC-5, Tres Finocchiaro wrote:

Hi,

Generally, the certificate that you have generated will not be trusted by a machine until it's distributed to machines needing it.

What's peculiar is that the message you've shared says "ERR_CONNECTION_TIMED_OUT", I'd expect the handshake to fail.

Is QZ Tray running?  Is the DNS name twine-work.com valid and does it point t the machine running QZ Tray?

- Tres.Fi...@gmail.com

On Sun, Nov 10, 2019 at 6:33 AM <dadhan...@gmail.com> wrote:

Hello,

I have tried to setup print server but its giving "WebSocket connection to 'wss://twine-work.com:8181/' failed: Error in connection establishment: net::ERR_CONNECTION_TIMED_OUT" error. I have generated certificate for twine-work.com using windows command promt.

--
You received this message because you are subscribed to the Google Groups "qz-print" group.

To unsubscribe from this group and stop receiving emails from it, send an email to qz-p...@googlegroups.com.

[Tres Finocchiaro]

Yes QZ-Tray is being pointed at it ( I confirmed it by unsecured WS connection, however WSS fails)

This is a separate issue, the OP is asking about HTTP connectivity.  Would you mind starting a separate thread?

-Tres

 

- Tres.Fin...@gmail.com

To unsubscribe from this group and stop receiving emails from it, send an email to qz-print+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qz-print/4f2036d6-db16-4cbb-89eb-80f49768ab71o%40googlegroups.com.

[Tres Finocchiaro]

Sorry, I'm wrong, I was confusing threads.  Will type a reply now. :)

- Tres.Fin...@gmail.com

[Tres Finocchiaro]

Aditya,

Is QZ Tray running?  Is there any firewall which may be blocking incoming access on 8181?

With newer versions of QZ Tray we offer HTTP and HTTPS pages hosted at http://<IP>:8182 (insecure) https://<IP>:8181 (secure).  You should be able to visit these and check the certificate that's being used.

I'm still confused by the message ERR_CONNECTION_TIMED_OUT because that seems different from what I'd expect to see when the certificate is incorrect or untrusted.

-Tres

- Tres.Fin...@gmail.com

[Tres Finocchiaro]

I'm still confused by the message ERR_CONNECTION_TIMED_OUT because that seems different from what I'd expect to see when the certificate is incorrect or untrusted.

I suppose if HTTPS was failing completely it could cause this.  Can you start QZ Tray from terminal and post the logs?  https://qz.io/wiki/faq#console-logs

[chugh....@gmail.com]

Tres,

Yes QZ Tray is running but there are no logs coming in to tell me the connection is coming in at all OR being rejected.

Also - from the router its forwarding port 9183 -> 8181 and it WAS working for the last 7 months with the exact same setup. All of a sudden, it stopped working yesterday with no code changes or cert changes or IP address changes

WebSocket connection to 'wss://qz2.accents.pw:9183/' failed: Error in connection establishment: net::ERR_CONNECTION_TIMED_OUT

Thanks,

Adi

p.s. Is there a way to test out WSS is working via port-forward by some debugging tool like curl or anything of the sort?

On Friday, July 10, 2020 at 12:02:38 PM UTC-4, Tres Finocchiaro wrote:

Aditya,

Is QZ Tray running?  Is there any firewall which may be blocking incoming access on 8181?

With newer versions of QZ Tray we offer HTTP and HTTPS pages hosted at http://<IP>:8182 (insecure) https://<IP>:8181 (secure).  You should be able to visit these and check the certificate that's being used.

I'm still confused by the message ERR_CONNECTION_TIMED_OUT because that seems different from what I'd expect to see when the certificate is incorrect or untrusted.

-Tres

- Tres.Fi...@gmail.com

On Fri, Jul 10, 2020 at 11:54 AM Tres Finocchiaro <tres.fi...@gmail.com> wrote:

Sorry, I'm wrong, I was confusing threads.  Will type a reply now. :)

- Tres.Fi...@gmail.com

On Fri, Jul 10, 2020 at 11:53 AM Tres Finocchiaro <tres.fi...@gmail.com> wrote:

Yes QZ-Tray is being pointed at it ( I confirmed it by unsecured WS connection, however WSS fails)

This is a separate issue, the OP is asking about HTTP connectivity.  Would you mind starting a separate thread?

-Tres

 

- Tres.Fi...@gmail.com

To view this discussion on the web visit https://groups.google.com/d/msgid/qz-print/4f2036d6-db16-4cbb-89eb-80f49768ab71o%40googlegroups.com.

[Tres Finocchiaro]

Yes QZ Tray is running but there are no logs coming in to tell me the connection is coming in at all OR being rejected.

QZ can't log on the network level.  It can only log what it sees.  If the connection is timing out, QZ won't know that because it never hit the application.

 p.s. Is there a way to test out WSS is working via port-forward by some debugging tool like curl or anything of the sort?

I'd say this is more of a port forwarding question and less of a QZ Tray question.  Any open port should suffer from this type of issue.  Historically, I've used telnet or putty, which tells me if the port is opened.  The output of these will be very ugly if HTTPS is working, because the information will arrive in encrypted/binary form, but you should see the same timeout.

This type of issue is generally a networking issue unrelated to QZ Tray.  Note, QZ Tray only white-lists the firewall ports on install, so if changes to the firewall occur after installation, QZ Tray may be impacted.  Furthemore, I've seen many (many) WIndows systems where the Firewall rules go ignored for seemingly no reason and toggling the firewall off and back on corrects it.

That said, this is all networking troubleshooting and a bit out of scope for what QZ Tray does.  QZ Tray will log if it's starting on a particular port and if it receives an incoming connection.  Anything network related falls outside of what QZ Tray can see.

- Tres.Fin...@gmail.com

To unsubscribe from this group and stop receiving emails from it, send an email to qz-print+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qz-print/4781a628-c639-46f2-9876-3608670b5605o%40googlegroups.com.