#dominoforever | Product Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

Support SNI in Notes Client

According to HCL Case CS0008905, Notes 9.0.1 does not properly handle SNI SSL certificates.  The problem can be recreated by using a browser (Chrome/Firefox/MS Edge) to load a page with images from a site that uses an SNI certificate, such as https://support.cloudflare.com/hc/en-us/articles/115001635128-Configuring-Rate-Limiting-from-the-Cloudflare-Dashboard.  Although copy/paste of text from the browser to a Notes document works, attempting to copy/paste the images results in "Image or object not found on server" and a 'red-X'.  

The push by Google for websites to support HTTPS will drive an increased usage of SNI certificates.  Cloudflare provides a service where it provides SNI certificates for websites it hosts, increasing the number of websites affected.  

This issue needs to be addressed as a default, not a feature request.  Notes needs to support modern web technologies if it is to remain competitive.

  • Guest
  • Jul 9 2019
  • Assessment
  • Attach files
  • Guest commented
    23 Mar 09:15am

    After a complete month working on a web servide consumer issue, I've found by myself that any version of domino server (ever the last 12.0.1 ) can't connect to a external soap web service that use SNI. Then I've found this thread. And since most web services use SNI, I wonder if there is anyone who is actually using this, and if it is yet another small reason to abandon domino. Nowadays and since a few years it is a must to have this working.

  • Guest commented
    3 Aug, 2021 11:27pm

    @Thomas Hampel, I just downloaded Notes Client 12.0 (fresh install) and can still reproduce the problem. HCL Support suggested I contact you through the Product Ideas Portal to get an update on when this enhancement might be released.

    Thanks, Norbert

  • Guest commented
    15 Mar, 2021 10:14am

    Need this for a large Domino deployment

  • Guest commented
    25 Jan, 2021 09:39am

    Thomas Hampel, see HCL support case CS0192135 for clarification.

    This problem also applies when Domino server is client. For example, when a Domino server connects to an external soap web service that uses SNI.

  • Guest commented
    20 Jan, 2021 08:40pm

    So does this mean that SNI is desired when the notes client is the HTTP client and also when the Domino HTTP server task is the HTTP client? In otherwise, SNI support outbound vs. inbound which is already done.

  • Guest commented
    4 Jan, 2021 12:35pm

    This problem is also visible if you open your ID-file in client and go to "Identity of others" and "Find out more about people/services". If you try to retrieve the certificate of an SNI-enabled service it does not work.

  • Guest commented
    20 Jan, 2020 04:16am

    As far as I can tell, this is set by Files -> Preferences / Web Browser.  However, that option does not show on both my production Notes 9.0.1FP9 system (upgraded numerous times over the years) and also a fresh install of 9.0.1FP10 - there is nothing between 'Toolbar' and 'Widgets'.  The fresh install has an Internet Browser tab in my Location settings, but this seems to be for something different.  Also, I am not clicking on a link - I am copying text with images from Chrome/Firefox/Edge and pasting into a Notes document.  

    Thanks, Norbert

  • Admin
    Thomas Hampel commented
    19 Jan, 2020 08:47pm

    Is your Notes client configured to use the operating system default web browser ?