264 Lotus blogs updated hourly. Who will post next? Home | Blogs | Search | About 
 
Latest 7 Posts
Solved : UNIK Table : itemdef.exe Cannot store document – database has too many unique field names
Tue, Feb 10th 2015 11
PL test ( sorry )
Thu, Jan 29th 2015 3
FoCul Best Practice ? Faceted Filtering in XPages Using Java Beans
Thu, Jan 29th 2015 11
Thank you to IBM just in the nick of time : SMTP TLS 1.0
Mon, Nov 3rd 2014 11
When using Apache in front of Domino you need the NE rewrite attribute
Thu, Oct 23rd 2014 9
Solving the SSL V3 / SHA-2 / TLS / MD5 / Poodle problem on Linux – Part 3 – Converting a Domino SSL certificate / Private Key to Apache
Wed, Oct 22nd 2014 16
Solving the Domino SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 1
Sat, Oct 18th 2014 15
Top 10
Please accept my apologies for the confusion – Dear IBM – this SHA-2 stuff is real – see below
Mon, Sep 22nd 2014 26
Don’t try to extract the private key from the Domino.kyr file
Fri, Oct 17th 2014 17
Solving the SSL V3 / SHA-2 / TLS / MD5 / Poodle problem on Linux – Part 3 – Converting a Domino SSL certificate / Private Key to Apache
Wed, Oct 22nd 2014 16
Solving the Domino SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 1
Sat, Oct 18th 2014 15
More Domino SSL woes – MD5 CSRs not accepted
Mon, Oct 13th 2014 11
Thank you to IBM just in the nick of time : SMTP TLS 1.0
Mon, Nov 3rd 2014 11
FoCul Best Practice ? Faceted Filtering in XPages Using Java Beans
Thu, Jan 29th 2015 11
Solved : UNIK Table : itemdef.exe Cannot store document – database has too many unique field names
Tue, Feb 10th 2015 11
Solving the SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 2
Sat, Oct 18th 2014 10
When using Apache in front of Domino you need the NE rewrite attribute
Thu, Oct 23rd 2014 9


Sean Cull
Blog Title FoCul » pl
Blog URL http://seancull.co.uk/category/lotus/
RSS Feed https://www.focul.net/category/pl/feed/
Validate Feed feedvalidator.org or validator.w3.org
Feed Last Checked Feb 10, 2015 2:07:14 PM EST. Realtime Update:
Location Lancashire, UK


Recent Blog Posts
11
Solved : UNIK Table : itemdef.exe Cannot store document – database has too many unique field names
Tue, Feb 10th 2015 2:07p   Sean Cull
I recently got this message when trying to replicate a Lotus Notes / XPage database that I had been working on. I had already ticked the “Allow More fields in database” option. The application does use documents with programmatically generated fields but when I ran some code to count the notesitems in the documents the largest document had 750 fields. After some time I came across the itemdef.exe application from IBM. This lists the contents of the “UNIK” table in the n
11
FoCul Best Practice ? Faceted Filtering in XPages Using Java Beans
Thu, Jan 29th 2015 5:11p   Sean Cull
Improved User Experience We have found that one of the most difficult parts of developing modern XPage applications has been providing the faceted filtering that users expect from modern web apps. By faceted I mean filtering that is intelligent ? If I choose the Ford manufacturer I should not then be presented with choices for models from Audi. This demo of the FoCul Knowledge Directory shows how we have achieved this in XPages without having to use SQL or SOLR databases. Choosing any f
11
Thank you to IBM just in the nick of time : SMTP TLS 1.0
Mon, Nov 3rd 2014 5:08p   Sean Cull
IBM has released fix packs to allow SMTP mail to be routed via TLS 1.0 rather than SSL V3 to eliminate the Poodle vulnerability. It is very straight forward to apply. The fix pack also covers HTTP traffic too so no more Apache Reverse Proxy servers unless you want them for other reasons. This is the 853 FP6 IF2 release – http://www-01.ibm.com/support/docview.wss?uid=swg21663874 Interestingly today we had our first emails that were being rejected by recipients because of SSL V3 so this is
9
When using Apache in front of Domino you need the NE rewrite attribute
Thu, Oct 23rd 2014 3:11p   Sean Cull
Over the last week or so I have been moving to using an Apache server in front of my Domino servers. This has been working really well until I had a problem with Mark Leusink’s Auto Login’s module The code includes some code that calls a url constructed as /autoLogins_v113.nsf/rememberMe.xsp?to=/dev/preprodprojectlibrary.nsf The Apache rewrite engine returns this as /autoLogins_v113.nsf/rememberMe.xsp?to=%252Fdev%252Fpreprodprojectlibrary.nsf whereas Domino would normally return
16
Solving the SSL V3 / SHA-2 / TLS / MD5 / Poodle problem on Linux – Part 3 – Converting a Domino SSL certificate / Private Key to Apache
Wed, Oct 22nd 2014 2:11p   Sean Cull
Part 1 – What is the problem Part 2 – Installing a simple Linux Reverse Proxy on the same box ( 20 mins ) Part 3 – ( This Post ) Converting your Domino SSL Certificate to work with Apache (30 mins ) Note that the easiest option to install a verified SSL certificate into the Apache server is to buy a new one. However, if you have a copy of Windows XP handy you can convert your existing Domino SSL certificates to Apache certificates with the following scheme. Many thanks to D
15
Solving the Domino SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 1
Sat, Oct 18th 2014 5:20p   Sean Cull
Part 1 – ( This post ) What is the problem Part 2 – Installing a simple Linux Reverse Proxy on the same box ( 20 mins ) Part 3 – Converting your Domino SSL Certificate to work with Apache (30 mins ) What is the problem ? There are a number of separate problems that can be solved ( from a Http perspective ) using the method set out here if you are running Domino on Linux SSL3 is currently vulnerable and Domino cannot use anything newer The Poodle exploit as detailed by Bill
10
Solving the SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 2
Sat, Oct 18th 2014 5:20p   Sean Cull
Part 1 – What is the problem Part 2 – ( This Post ) Installing a simple Linux Reverse Proxy on the same box ( 20 mins ) Part 3 – Converting your Domino SSL Certificate to work with Apache (30 mins ) The Fix This fix is to add an Apache Server in front of Domino where Domino is running on a Linux box. All of the web serving functionality will be handled by Apache. It should take about 20 minutes. Note at the end of this step you will be using a self signed SSL certificate. P
17
Don’t try to extract the private key from the Domino.kyr file
Fri, Oct 17th 2014 4:57a   Sean Cull
I have been making some good progress with addressing the SSL issues by using an Apache Server in front of Domino and running on the same box – from a HTTP / HTTPS point f view it is actually pretty straight forward. One rub though is that I wanted to re-sue my existing SSL certs I think I could have done this using Windows XP ( no joke ) and Keyman to extract the private key from the Keyring as per this technical article from IBM How to export the private key from a Domino keyfile by usin
11
More Domino SSL woes – MD5 CSRs not accepted
Mon, Oct 13th 2014 10:33a   Sean Cull
So we moved suppliers for SSL certificates after our last one stopped doing SHA-1. We settled on https://www.startssl.com as they were recommended and seem to have a good approach. Unfortunately they will not accept CSR requests using an MD5 checksum as it is not secure enough – what is the only option in Domino ? Apparently a number of better known SSL suppliers have adopted the same policy. There are workarounds using ikeyman if you have an XP machine to run it on. Not going to say an
26
Please accept my apologies for the confusion – Dear IBM – this SHA-2 stuff is real – see below
Mon, Sep 22nd 2014 4:40a   Sean Cull
I just received this from our usual SSL Certificate supplier. Another 2 hours wasted in help tickets – the 3rd time in 2 months that I have struggled to apply SSL certificates to Domino. In total confusion over SHA1 / 2 has caused me over 1.5 days of unbillable work over the last 2 months. IBM you might as well throw away all the work you did on XPages if you behave like this – your offering is only as strong as its weakest link. Vlad I. 22.9.2014. 11:16 AM Dear Sean, Please ac
5
Nice things customers say
Fri, Aug 22nd 2014 10:15a   Sean Cull
A nice way to end the week “Working with FoCul has provided a great partnership, improving the ABB processes and services whilst retaining the ability to customise our products at short notice to meet specific customer needs. The benefit has been a 30% efficiency saving, allowing ABB to deliver over £15M of studies more competitively.” http://www.prime-toolkit.com/demo
8
SNTT – getting access to a Git derived nsf/ntf when you are not in the ACL
Wed, Aug 20th 2014 9:55a   Sean Cull
Sometimes when you pull down a git based Notes design you find that you cannot open the NSF that you have crated from the On Disk Project because you do not have access in the ACL. Open the folder structure of the ODP at file system level and use a text editor to change the line below. You then need to refresh the ODP via Package Explorer. Don’t forget to push this change back to Git or the next person will struggle too.




Created and Maintained by Yancy Lent - About - Planet Lotus Blog - Advertising - Mobile Edition