CodeStore.net comments on "Setting Up SSL on Domino -- The No Nonsense Guide"

Reply from Johann Echavarría

Johann Echavarría — Tue, 03 Feb 2009 14:43:16 -0600

Nice post. This was exactly what I needed. Help files are very complex on this subject. Now SSL works OK on my dev server. Thank you very much.

Reply from Jake Howlett

Jake Howlett — Fri, 30 May 2008 10:01:00 +0100

I agree Robert, but you're missing the point. I'm talking about development environment, which, in my case, only I ever see. More often than not the customer takes care of their own SSL purchasing and setup. That's not normally for me to worry about. I just need to make sure the environment on my side is an exact copy.

Reply from Robert Lozano

Robert Lozano — Fri, 30 May 2008 09:30:00 +0100

Actually buying the SSL from verisign only costs about 2k a year. It is more professional in that your customer won't get a funny dialog screen with a red X in the certificate box. I mean, any dumb auditor would point it out and make a mountain out of a mole hill.

Save yourself the shame of explaining what a CA authority is. Pay Verisign and forget... You will get peace of mind from not needing that dialog box pop out with that yellow letter there.

Reply from Jesper Kiaer

Jesper Kiaer — Thu, 29 May 2008 04:14:00 +0100

Ups..sorry , did not see the link in your post to the IBM Support page.

Reply from Jake Howlett

Jake Howlett — Wed, 28 May 2008 05:43:00 +0100

"is really a no brainer in Domino".

I agree. Unless you try and do it by following instruction in the admin help file, which is the reason I posted the link. It's only a no-brainer if you know the easy way.

Reply from Jesper Kiaer

Jesper Kiaer — Wed, 28 May 2008 05:20:00 +0100

Setting SSL up for developing purposes is really a no brainer in Domino.

- Create a self-certified certificate (5 min)

- copy the certificates to the server (1 min)

- point to the correct .kyr file in the Internet site document under in the SSL options (1 min)

- Check "Require SSL connection" in the db properties. (5 sec)

I may be forgetting some steps...but that is about it!

brgds Jesper Kiaer

{Link}

Reply from Nasir

Nasir — Tue, 27 May 2008 10:26:00 +0100

Thanks Jake,

Two days back I was in the same situation and was trying to follow the steps in Administrator Help documents but didn't manage to make it work.

I can now easily setup with these steps.

Thanks again.

Reply from Scott

Scott — Mon, 26 May 2008 08:35:00 +0100

The timing is uncanny .. I've got a post in draft about setting up SSL using the CA process. I did wade through the help files and eventually got there ... but for what is a 20 mins job it took me hours to sort it out with a couple of false starts.

There seems to be no consistent help pages especially with R5 set-up options mixed in with newer CA process options.

Thanks for the post .. if only it was 2 weeks earlier the timing would have been perfect :-)

Reply from Gurmeet

Gurmeet — Fri, 23 May 2008 12:32:00 +0100

Jake,

I have used this redbook in past and was able to setup SSL.

{Link}

However, I agree with you that it's not something you want to setup again and again in your development environment, but it is much cheaper than buying SSL certificate from verisign or others..:)

Cheers!

Gurmeet

Reply from Matt Cooper

Matt Cooper — Fri, 23 May 2008 08:32:00 +0100

While Notes wouldn't be the same without the help files, it also wouldn't be the same without CodeStore.net.

I've often scoured the help files for a specific detail or the correct syntax, but I've always ended up here when it was all said and done.

Nice site Jake!

On topic: After attempting to set up SSL on my Domino server, I opted for a hosted plan with SSL. I figured if it was that difficult to set up, it would be a mother to fix when it broke. This article should help.

Regards,

Matt