This forum is closed to new posts and responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:

HCL Software Customer Support Portal for U.S. Federal Government clients
HCL Software Customer Support Portal


~Zach Nonboosipuletsi
Jun 7, 2013, 4:43 PM
36 Posts

Embedded Browser and SSL

  • Category: OpenSocial - Embedded Experiences
  • Platform: Windows
  • Release: 9.0
  • Role: Administrator
  • Tags:
  • Replies: 9

A strange problem appears. 

I have my own certificate center. It is in Internet root authority. But when i open the link in embedded browser it gives the following message:

Update. Its problem only with EE. 

~Samuel Preniskioden
Jun 11, 2013, 7:40 PM
23 Posts
Warning For A Self Signed Cert
Is the EE loading something (like images) from a site that is using a self signed cert?  That is generally why you would see this message.  What is this an embedded experience for?
~Zach Nonboosipuletsi
Jun 12, 2013, 7:16 AM
36 Posts
Hmmm

Certificate is provided by my certificate authority based on Domino. Is this a problem for EE?

When i tried to use "Update" from Connections i added CA certificate to java in domino. Otherwise it didn't work

If you can give me some links on how to work with certificate based on Domino CA with EE, i'll be delighted.

And one more question - In Domino 9 we can use http CRL point, and there is no information about how to publish web server for this.

~Samuel Preniskioden
Jun 13, 2013, 1:04 AM
23 Posts
Two separate issues
It sounds like you have a self signed cert for both your Domino and Connections server.

The Connections gadgets that you render in Notes or iNotes it will make requests through Java servlets running on the Domino server to the Connections server over https.  Since the Connections server is using a self signed cert it needs to be imported into the JVM of the Domino server or else the JVM will not allow the Java servlets to make the request.

The fact that you imported the Connections certificate into the Domino JVM has no effect on the warning dialog you see in the Notes client.  I can't tell from the dialog which cert the dialog is warning you about (either Domino or Connections) but that is not important.  The warning is normal for browsers when you navigate to a page that is using a self signed cert, Chrome, IE, and Firefox all behave the same.  Once you accept the cert you won't see the warning dialog again until you clear the browsers cache in Notes.
~Zach Nonboosipuletsi
Jun 13, 2013, 5:27 PM
36 Posts
Next

Yes certificates for Domino & Connections are from one CA

Sure I imported the root certificate into jvm to run EE

But i don't agree that the received warning is not important, it does irritate the users and cause a lot of questions from their side. More over as it follows from this post, there is such a problem with all certificates not included in Domino.

 Is there any opportunity to solve this problem?

I dont have any such warning in Chrome or Firefox :)

~Samuel Preniskioden
Jun 13, 2013, 9:32 PM
23 Posts
Do you get the warning every time?
Do you get the cert warning every time?  Or does each user only see it once?  You should only see it one time.

In most browsers (Chrome, FireFox, IE) once you accept the cert you don't get the prompt again until you explicitly tell the browser to remove it.
~Zach Nonboosipuletsi
Jun 14, 2013, 6:47 PM
36 Posts
Its not self signed

Ryan, do we understand each other? :)

Its not self signed certificate, i have Certificate Authority center. And after i imported root certificate as trust root into any browser i dont have any warning.

One more, if i open web page in embedded browser, once again i dont have any warnings. 

I see this warning ONLY if i use EE (from Connections or xpage) and i see it every time when i launch Notes.

 

~Samuel Preniskioden
Jun 17, 2013, 9:16 PM
23 Posts
Maybe we don't ;)
"Its not self signed certificate, i have Certificate Authority center. And after i imported root certificate as trust root into any browser i dont have any warning."  <- To me this sounds like you had to import the cert into the browser which would mean that the certificate was not signed by someone the browser trusted, for example Verisign.  Is that incorrect?
~Zach Nonboosipuletsi
Jun 18, 2013, 12:01 PM
36 Posts
incorrect

Certificate signed GoDaddy for example, or another internal authority, and browser trusting this authority.

Ryan, when i open web page in emdedded browser from same url, i dont have this warning.

But if i try to open "Update" or another EE, i have it.

~Samuel Preniskioden
Jun 20, 2013, 12:27 AM
23 Posts
Copy Of Cert
Can you supply a screen shot of the certificate?

P.S. I will be going on vacation tomorrow and won't be back until July 2nd.  I will respond when I return.

This forum is closed to new posts and responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:

HCL Software Customer Support Portal for U.S. Federal Government clients
HCL Software Customer Support Portal