Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

Status Shipped
Workspace Notes
Created by Guest
Created on Jul 9, 2019

Support SNI in Notes Client

According to HCL Case CS0008905, Notes 9.0.1 does not properly handle SNI SSL certificates.  The problem can be recreated by using a browser (Chrome/Firefox/MS Edge) to load a page with images from a site that uses an SNI certificate, such as https://support.cloudflare.com/hc/en-us/articles/115001635128-Configuring-Rate-Limiting-from-the-Cloudflare-Dashboard.  Although copy/paste of text from the browser to a Notes document works, attempting to copy/paste the images results in "Image or object not found on server" and a 'red-X'.  

The push by Google for websites to support HTTPS will drive an increased usage of SNI certificates.  Cloudflare provides a service where it provides SNI certificates for websites it hosts, increasing the number of websites affected.  

This issue needs to be addressed as a default, not a feature request.  Notes needs to support modern web technologies if it is to remain competitive.

  • Attach files
  • Guest
    Reply
    |
    Jan 9, 2023

    I have just installed the 12.0.2 64-bit client and am still seeing the red 'x' problem when pasting information from some sites from Chrome and Microsoft into a Notes document. Although pasting each image as a bitmap works, the problem is now affecting emails as well when embedded images are hosted on an HTTPS server using SNI. Ifthere is not a "View in browser" link, extracting the URLs from the email source to understand the content of the email is wearing thin.

  • Guest
    Reply
    |
    Mar 23, 2022

    After a complete month working on a web servide consumer issue, I've found by myself that any version of domino server (ever the last 12.0.1 ) can't connect to a external soap web service that use SNI. Then I've found this thread. And since most web services use SNI, I wonder if there is anyone who is actually using this, and if it is yet another small reason to abandon domino. Nowadays and since a few years it is a must to have this working.

  • Guest
    Reply
    |
    Aug 3, 2021

    @Thomas Hampel, I just downloaded Notes Client 12.0 (fresh install) and can still reproduce the problem. HCL Support suggested I contact you through the Product Ideas Portal to get an update on when this enhancement might be released.

    Thanks, Norbert

  • Guest
    Reply
    |
    Mar 15, 2021

    Need this for a large Domino deployment

  • Guest
    Reply
    |
    Jan 25, 2021

    Thomas Hampel, see HCL support case CS0192135 for clarification.

    This problem also applies when Domino server is client. For example, when a Domino server connects to an external soap web service that uses SNI.

  • Guest
    Reply
    |
    Jan 20, 2021

    So does this mean that SNI is desired when the notes client is the HTTP client and also when the Domino HTTP server task is the HTTP client? In otherwise, SNI support outbound vs. inbound which is already done.

  • Guest
    Reply
    |
    Jan 4, 2021

    This problem is also visible if you open your ID-file in client and go to "Identity of others" and "Find out more about people/services". If you try to retrieve the certificate of an SNI-enabled service it does not work.

  • Guest
    Reply
    |
    Jan 20, 2020

    As far as I can tell, this is set by Files -> Preferences / Web Browser.  However, that option does not show on both my production Notes 9.0.1FP9 system (upgraded numerous times over the years) and also a fresh install of 9.0.1FP10 - there is nothing between 'Toolbar' and 'Widgets'.  The fresh install has an Internet Browser tab in my Location settings, but this seems to be for something different.  Also, I am not clicking on a link - I am copying text with images from Chrome/Firefox/Edge and pasting into a Notes document.  

    Thanks, Norbert

  • Admin
    Thomas Hampel
    Reply
    |
    Jan 19, 2020

    Is your Notes client configured to use the operating system default web browser ?

4 MERGED

Support for SNI in SSL Stack on Domino Server and Notes Client

Merged
Consuming a web service on a remote Web Server fails if the remote Server uses a wildcard certificate. Domino has no SNI support for SSL and therefore the connection is immediatly closed by domino. The error message from domino " ac cross certific...
about 3 years ago in Notes 0 Shipped