We came across an issue with some Java code that uses the Apache HTTP client to access another resource on the same Domino server. It's basically an agent that collects stuff from other NSFs using an HTTP request. This works perfectly as long as your server works with a custom wild card SSL certificate from a "common" certificate authority. However, when you are using the Let's Encrypt certificate that you get using Domino's CertMgr, your code may stop working as the HTTP request will fail with an error like this:

Four weeks on from the last code drop HCL today released 12.0.2 EAP Drop 5Headline items for me: Domino Restyler is available out of box in the Notes client as opposed to the last drop in Nomad. (Note: a very informative getting started video with Domino Restyle from the Cross Canada Collaboration User Group is here ) We get a new version of the Admin/Designer 64 bit client. (that’s not to say we don’t get versions of all other client, we do) The Notes client on Mac runs on 12.6 Monterey (though won’t perfectly until GA)

If you are using DOTS in Domino 12.x, you might have seen some NullPointer Exceptions after you have updated a DOTS plugin. Recommendation was to delete the complete workspace-dots folder prior to starting DOTS after the upgrade. This issue has been addressed in SPR# SJAAC3BNWV: DOTS – Workspace need to be deleted on every change and add of new plugin. With this fix it is no longer necessary to delete the workspace-dots folder. Not sure, when the fix was provided. There is no information about it in the fix list database. But this is only true for Domino on WINDOWS. If you are using DOTS with Domino on LINUX, you will see an error on the Domino server console ( “An error occurred while processing the command”) or even worse, the NullPointer Exceptions. The problem is that the underlying API in Domino does not delete files starting with a dot. (hidden files on UNIX systems).

One Touch setup (OTS) is quite powerful tool. But sometimes you need to know exactly what happens and combine functionality to make best use of it. With Domino 12.0.2 OTS creates certstore.nsf automatically and you can let it create a MicroCA for you. But what if you want to use a Let's Encrypt certificate instead? There is a quite simple way to just find and update the existing document with a appConfiguration. And if you specify notes.ini CertMgr_ACCEPT_TOU=1 the ACME account license agreement will be automatically accepted (already part of 12.0.0).

You should pay special attention to the infrastructure that keeps the entire IT system running. Especially, at the beginning of your journey to HCL Nomad Web. That’s important, because it must meet all security standards to ensure the smooth operation of HCL Nomad Web. We will therefore take a look at what we actually need for the infrastructure for HCL Nomad Web.

Usually OpenSSL is the tool of choice for all type of certificate operations. But what if no OpenSSL command line is available? Like in a Domino container where you can't install software? After some research, I came up with the keytool, which is part of the JVM Domino ships.