Technote Number: 1104908
Problem:
These errors can occur for the following possible reasons:
1. The keyfile.kyr and keyfile.sth files are located in different directories.
2. The file permissions on both the keyfile.kyr and keyfile.sth differ, or the
server does not have rights to the files.
3. The file has become corrupt.
In one particular instance, only the user who created the keyring files was
listed in the permissions. Once the server itself was added to the
permissions, SSL functioned as expected when the HTTP task was restarted.
In another case, replacing the file with a backup copy resolved the error.
Also, a specific case involving file permission settings was reported to
Quality Engineering as SPR# MALR5M37Y6 and has been fixed in Domino 6.5.5 and
Domino 7.0.2.
Excerpt from the Lotus Notes and Domino Release 6.5.5 fix list (available at
http://www.ibm.com/developerworks/lotus):
Security
SPR# MALR5M37Y6 - Some of Domino OS's (Windows and Solaris) have limits to I/O
using FILE'S that do not apply to file descriptors. FILE's were being used to
read the SSL keyring. This could cause transient SSL connection failures.
These connection failures have been fixed in 7.0.2. More >
|  |
|
|
|
|
|