Notes/Domino Fix List
| |
SPR # MALR52JU5Q | Fixed in 5.0.10 release | Security fix |
Product Area: Server Technical Area: JAVA Platform: Cross Platform
SPR# MALR52JU5Q - Fixed problem with establishing SSL connection over DIIOP when the web server keyring file has a 1024-bit Internet certificate.
Technote Number: 1087593
Problem:
This problem is caused by the length of the key file and the DIIOP
implementation in current versions of Domino. This issue has been reported to
Lotus Quality Engineering and a fix is being researched.
To work around the issue, install the SSL certificate with a shorter key. Or
use a solution where the channel encryption takes place before the IIOP
connection gets to Domino (for example, a Virtual Private Network entrance to
the network hosting the application).Supporting Information:
On the server, the only error you see for the DIIOP task is "Invalid Peer" as
follows:
07/24/2001 05:46:46 PM DIIOP connection from '10.0.0.1' failed: SSL Error:
Invalid peer
Related Documents:
More >
Last Modified on 01/21/2005
Go back
|