This forum is closed to new posts and responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:

HCL Software Customer Support Portal for U.S. Federal Government clients
HCL Software Customer Support Portal


Sep 5, 2018, 7:14 PM
2 Posts

installation of a wildcard SSL : HTTP Server: SSL handshake failure, no SSL Keyring file specified for IP address [...]

  • Category: Domino Server
  • Platform: Linux
  • Release: 9.0.1
  • Role:
  • Tags: SSL HTTP
  • Replies: 2

since chrome 68 version , we need now to install SSL on all HTTP servers.  

So , I installed a SSL certificate wildcard *.domain.com on the servers (keyfile-SRV.kyr + keyfile-SRV.sth)

Server : Domino 9.01FP5 for Linux64

 

I configured all the servers/internet sites documents and servers documents
in the document "servers/internet sites " in field "Host names or addresses mapped to this site:" there is "domain.com"
NOTE : in HTTP the configuration find and use correctly all the parameters in the documents "servers/internet sites"

 

"tell http show security" display : 

Web Site: domain.com (domain.com)
SSL enabled
Key file name: /home/local/notesdata/keyfile-SRV.kyr

 

 

accessing https://domain.com give the error : 

HTTP Server: SSL handshake failure, no SSL Keyring file specified for IP address [.....]

 

 

NOTE : If we enter the ip address in the document "servers/internet sites " in field "Host names or addresses mapped to this site:" the SSL work perfectly and https://domain.com work

NOTE : If we enter the keyring certificate configuration in the DEFAULT document "servers/internet sites" , the SSL work perfectly and https://domain.com work

but we have many servers and several SSL certificate per server, so we cannot use this configuration

 

the SSL system seem have a problem to load the configuration by using the domain name but work well by using the IP. HTTP do not have any problem.

 

Is someone have installed a wildcard SSL and configured "servers/internet sites" with domains names ? 

what can generate this problem ?

Sep 7, 2018, 2:03 PM
328 Posts
You need a separate IP for each SSL enabled site.

Only one SSL enabled Internet Site document is allowed per IP address. 

And you will want to enter the ip address in the document "servers/internet sites " in field "Host names or addresses mapped to this site:"

Internet Site documents work by retrieving the Host header sent by the client. For a Web browser, this Host header is the server name or IP address entered in the URL. Domino compares this header to the Internet Site documents and uses the matching site (or the default if no specific match).

See this technote -> http://www-01.ibm.com/support/docview.wss?uid=swg21173919

 

Sep 9, 2018, 10:39 AM
2 Posts
thanks a lot

Thanks a lot, the answser is very clear

 


This forum is closed to new posts and responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:

HCL Software Customer Support Portal for U.S. Federal Government clients
HCL Software Customer Support Portal