Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

Support SNI in Notes Client

According to HCL Case CS0008905, Notes 9.0.1 does not properly handle SNI SSL certificates.  The problem can be recreated by using a browser (Chrome/Firefox/MS Edge) to load a page with images from a site that uses an SNI certificate, such as https://support.cloudflare.com/hc/en-us/articles/115001635128-Configuring-Rate-Limiting-from-the-Cloudflare-Dashboard.  Although copy/paste of text from the browser to a Notes document works, attempting to copy/paste the images results in "Image or object not found on server" and a 'red-X'.  

The push by Google for websites to support HTTPS will drive an increased usage of SNI certificates.  Cloudflare provides a service where it provides SNI certificates for websites it hosts, increasing the number of websites affected.  

This issue needs to be addressed as a default, not a feature request.  Notes needs to support modern web technologies if it is to remain competitive.

  • Attach files
      Drop here to upload
    • Guest
      Jan 9, 2023

      I have just installed the 12.0.2 64-bit client and am still seeing the red 'x' problem when pasting information from some sites from Chrome and Microsoft into a Notes document. Although pasting each image as a bitmap works, the problem is now affecting emails as well when embedded images are hosted on an HTTPS server using SNI. Ifthere is not a "View in browser" link, extracting the URLs from the email source to understand the content of the email is wearing thin.

    • Guest
      Mar 23, 2022

      After a complete month working on a web servide consumer issue, I've found by myself that any version of domino server (ever the last 12.0.1 ) can't connect to a external soap web service that use SNI. Then I've found this thread. And since most web services use SNI, I wonder if there is anyone who is actually using this, and if it is yet another small reason to abandon domino. Nowadays and since a few years it is a must to have this working.

    • Guest
      Aug 3, 2021

      @Thomas Hampel, I just downloaded Notes Client 12.0 (fresh install) and can still reproduce the problem. HCL Support suggested I contact you through the Product Ideas Portal to get an update on when this enhancement might be released.

      Thanks, Norbert

    • Guest
      Mar 15, 2021

      Need this for a large Domino deployment

    • Guest
      Jan 25, 2021

      Thomas Hampel, see HCL support case CS0192135 for clarification.

      This problem also applies when Domino server is client. For example, when a Domino server connects to an external soap web service that uses SNI.

    • Guest
      Jan 20, 2021

      So does this mean that SNI is desired when the notes client is the HTTP client and also when the Domino HTTP server task is the HTTP client? In otherwise, SNI support outbound vs. inbound which is already done.

    • Guest
      Jan 4, 2021

      This problem is also visible if you open your ID-file in client and go to "Identity of others" and "Find out more about people/services". If you try to retrieve the certificate of an SNI-enabled service it does not work.

    • Guest
      Jan 20, 2020

      As far as I can tell, this is set by Files -> Preferences / Web Browser.  However, that option does not show on both my production Notes 9.0.1FP9 system (upgraded numerous times over the years) and also a fresh install of 9.0.1FP10 - there is nothing between 'Toolbar' and 'Widgets'.  The fresh install has an Internet Browser tab in my Location settings, but this seems to be for something different.  Also, I am not clicking on a link - I am copying text with images from Chrome/Firefox/Edge and pasting into a Notes document.  

      Thanks, Norbert

    • Admin
      Thomas Hampel
      Jan 19, 2020

      Is your Notes client configured to use the operating system default web browser ?

    4 MERGED

    Support for SNI in SSL Stack on Domino Server and Notes Client

    Consuming a web service on a remote Web Server fails if the remote Server uses a wildcard certificate. Domino has no SNI support for SSL and therefore the connection is immediatly closed by domino. The error message from domino " ac cross certific...
    over 3 years ago in Notes 0 Shipped