#dominoforever | Product Ideas Portal

 

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

Support SNI in Notes Client

According to HCL Case CS0008905, Notes 9.0.1 does not properly handle SNI SSL certificates.  The problem can be recreated by using a browser (Chrome/Firefox/MS Edge) to load a page with images from a site that uses an SNI certificate, such as https://support.cloudflare.com/hc/en-us/articles/115001635128-Configuring-Rate-Limiting-from-the-Cloudflare-Dashboard.  Although copy/paste of text from the browser to a Notes document works, attempting to copy/paste the images results in "Image or object not found on server" and a 'red-X'.  

The push by Google for websites to support HTTPS will drive an increased usage of SNI certificates.  Cloudflare provides a service where it provides SNI certificates for websites it hosts, increasing the number of websites affected.  

This issue needs to be addressed as a default, not a feature request.  Notes needs to support modern web technologies if it is to remain competitive.

  • Guest
  • Jul 9 2019
  • Likely to implement
  • Attach files
  • Guest commented
    15 Mar 10:14am

    Need this for a large Domino deployment

  • Guest commented
    25 Jan 09:39am

    Thomas Hempel, see HCL support case CS0192135 for clarification.

    This problem also applies when Domino server is client. For example, when a Domino server connects to an external soap web service that uses SNI.

  • Guest commented
    20 Jan 08:40pm

    So does this mean that SNI is desired when the notes client is the HTTP client and also when the Domino HTTP server task is the HTTP client? In otherwise, SNI support outbound vs. inbound which is already done.

  • Guest commented
    4 Jan 12:35pm

    This problem is also visible if you open your ID-file in client and go to "Identity of others" and "Find out more about people/services". If you try to retrieve the certificate of an SNI-enabled service it does not work.

  • Guest commented
    20 Jan, 2020 04:16am

    As far as I can tell, this is set by Files -> Preferences / Web Browser.  However, that option does not show on both my production Notes 9.0.1FP9 system (upgraded numerous times over the years) and also a fresh install of 9.0.1FP10 - there is nothing between 'Toolbar' and 'Widgets'.  The fresh install has an Internet Browser tab in my Location settings, but this seems to be for something different.  Also, I am not clicking on a link - I am copying text with images from Chrome/Firefox/Edge and pasting into a Notes document.  

    Thanks, Norbert

  • Admin
    Thomas Hampel commented
    19 Jan, 2020 08:47pm

    Is your Notes client configured to use the operating system default web browser ?