263 Lotus blogs updated hourly. Who will post next? Home | Blogs | Search | About 
 
Latest 7 Posts
PL test ( sorry )
Thu, Jan 29th 2015 38
FoCul Best Practice ? Faceted Filtering in XPages Using Java Beans
Thu, Jan 29th 2015 95
Thank you to IBM just in the nick of time : SMTP TLS 1.0
Mon, Nov 3rd 2014 11
When using Apache in front of Domino you need the NE rewrite attribute
Thu, Oct 23rd 2014 13
Solving the SSL V3 / SHA-2 / TLS / MD5 / Poodle problem on Linux – Part 3 – Converting a Domino SSL certificate / Private Key to Apache
Wed, Oct 22nd 2014 21
Solving the Domino SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 1
Sat, Oct 18th 2014 84
Solving the SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 2
Sat, Oct 18th 2014 11
Top 10
FoCul Best Practice ? Faceted Filtering in XPages Using Java Beans
Thu, Jan 29th 2015 95
Solving the Domino SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 1
Sat, Oct 18th 2014 84
PL test ( sorry )
Thu, Jan 29th 2015 38
Solving the SSL V3 / SHA-2 / TLS / MD5 / Poodle problem on Linux – Part 3 – Converting a Domino SSL certificate / Private Key to Apache
Wed, Oct 22nd 2014 21
Please accept my apologies for the confusion – Dear IBM – this SHA-2 stuff is real – see below
Mon, Sep 22nd 2014 18
Don’t try to extract the private key from the Domino.kyr file
Fri, Oct 17th 2014 17
When using Apache in front of Domino you need the NE rewrite attribute
Thu, Oct 23rd 2014 13
SNTT – getting access to a Git derived nsf/ntf when you are not in the ACL
Wed, Aug 20th 2014 11
Solving the SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 2
Sat, Oct 18th 2014 11
Thank you to IBM just in the nick of time : SMTP TLS 1.0
Mon, Nov 3rd 2014 11


Sean Cull
Blog Title FoCul pl
Blog URL http://seancull.co.uk/category/lotus/
RSS Feed https://www.focul.net/category/pl/feed/
Validate Feed feedvalidator.org or validator.w3.org
Feed Last Checked Jan 29, 2015 5:11:32 PM EST. Realtime Update:
Location Lancashire, UK


Recent Blog Posts
95
FoCul Best Practice ? Faceted Filtering in XPages Using Java Beans
Thu, Jan 29th 2015 5:11p   Sean Cull
Improved User Experience We have found that one of the most difficult parts of developing modern XPage applications has been providing the faceted filtering that users expect from modern web apps. By faceted I mean filtering that is intelligent ? If I choose the Ford manufacturer I should not then be presented with choices for models from Audi. This demo of the FoCul Knowledge Directory shows how we have achieved this in XPages without having to use SQL or SOLR databases. Choosing any f
11
Thank you to IBM just in the nick of time : SMTP TLS 1.0
Mon, Nov 3rd 2014 5:08p   Sean Cull
IBM has released fix packs to allow SMTP mail to be routed via TLS 1.0 rather than SSL V3 to eliminate the Poodle vulnerability. It is very straight forward to apply. The fix pack also covers HTTP traffic too so no more Apache Reverse Proxy servers unless you want them for other reasons. This is the 853 FP6 IF2 release – http://www-01.ibm.com/support/docview.wss?uid=swg21663874 Interestingly today we had our first emails that were being rejected by recipients because of SSL V3 so this is
13
When using Apache in front of Domino you need the NE rewrite attribute
Thu, Oct 23rd 2014 3:11p   Sean Cull
Over the last week or so I have been moving to using an Apache server in front of my Domino servers. This has been working really well until I had a problem with Mark Leusink’s Auto Login’s module The code includes some code that calls a url constructed as /autoLogins_v113.nsf/rememberMe.xsp?to=/dev/preprodprojectlibrary.nsf The Apache rewrite engine returns this as /autoLogins_v113.nsf/rememberMe.xsp?to=%252Fdev%252Fpreprodprojectlibrary.nsf whereas Domino would normally return
21
Solving the SSL V3 / SHA-2 / TLS / MD5 / Poodle problem on Linux – Part 3 – Converting a Domino SSL certificate / Private Key to Apache
Wed, Oct 22nd 2014 2:11p   Sean Cull
Part 1 – What is the problem Part 2 – Installing a simple Linux Reverse Proxy on the same box ( 20 mins ) Part 3 – ( This Post ) Converting your Domino SSL Certificate to work with Apache (30 mins ) Note that the easiest option to install a verified SSL certificate into the Apache server is to buy a new one. However, if you have a copy of Windows XP handy you can convert your existing Domino SSL certificates to Apache certificates with the following scheme. Many thanks to D
84
Solving the Domino SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 1
Sat, Oct 18th 2014 5:20p   Sean Cull
Part 1 – ( This post ) What is the problem Part 2 – Installing a simple Linux Reverse Proxy on the same box ( 20 mins ) Part 3 – Converting your Domino SSL Certificate to work with Apache (30 mins ) What is the problem ? There are a number of separate problems that can be solved ( from a Http perspective ) using the method set out here if you are running Domino on Linux SSL3 is currently vulnerable and Domino cannot use anything newer The Poodle exploit as detailed by Bill
11
Solving the SSL V3 / SHA-2 / TLS / MD5 problem on Linux – Part 2
Sat, Oct 18th 2014 5:20p   Sean Cull
Part 1 – What is the problem Part 2 – ( This Post ) Installing a simple Linux Reverse Proxy on the same box ( 20 mins ) Part 3 – Converting your Domino SSL Certificate to work with Apache (30 mins ) The Fix This fix is to add an Apache Server in front of Domino where Domino is running on a Linux box. All of the web serving functionality will be handled by Apache. It should take about 20 minutes. Note at the end of this step you will be using a self signed SSL certificate. P
17
Don’t try to extract the private key from the Domino.kyr file
Fri, Oct 17th 2014 4:57a   Sean Cull
I have been making some good progress with addressing the SSL issues by using an Apache Server in front of Domino and running on the same box – from a HTTP / HTTPS point f view it is actually pretty straight forward. One rub though is that I wanted to re-sue my existing SSL certs I think I could have done this using Windows XP ( no joke ) and Keyman to extract the private key from the Keyring as per this technical article from IBM How to export the private key from a Domino keyfile by usin
10
More Domino SSL woes – MD5 CSRs not accepted
Mon, Oct 13th 2014 10:33a   Sean Cull
So we moved suppliers for SSL certificates after our last one stopped doing SHA-1. We settled on https://www.startssl.com as they were recommended and seem to have a good approach. Unfortunately they will not accept CSR requests using an MD5 checksum as it is not secure enough – what is the only option in Domino ? Apparently a number of better known SSL suppliers have adopted the same policy. There are workarounds using ikeyman if you have an XP machine to run it on. Not going to say an
18
Please accept my apologies for the confusion – Dear IBM – this SHA-2 stuff is real – see below
Mon, Sep 22nd 2014 4:40a   Sean Cull
I just received this from our usual SSL Certificate supplier. Another 2 hours wasted in help tickets – the 3rd time in 2 months that I have struggled to apply SSL certificates to Domino. In total confusion over SHA1 / 2 has caused me over 1.5 days of unbillable work over the last 2 months. IBM you might as well throw away all the work you did on XPages if you behave like this – your offering is only as strong as its weakest link. Vlad I. 22.9.2014. 11:16 AM Dear Sean, Please ac
7
Nice things customers say
Fri, Aug 22nd 2014 10:15a   Sean Cull
A nice way to end the week “Working with FoCul has provided a great partnership, improving the ABB processes and services whilst retaining the ability to customise our products at short notice to meet specific customer needs. The benefit has been a 30% efficiency saving, allowing ABB to deliver over £15M of studies more competitively.” http://www.prime-toolkit.com/demo
11
SNTT – getting access to a Git derived nsf/ntf when you are not in the ACL
Wed, Aug 20th 2014 9:55a   Sean Cull
Sometimes when you pull down a git based Notes design you find that you cannot open the NSF that you have crated from the On Disk Project because you do not have access in the ACL. Open the folder structure of the ODP at file system level and use a text editor to change the line below. You then need to refresh the ODP via Package Explorer. Don’t forget to push this change back to Git or the next person will struggle too.
3
Adding Jar and zip files to SourceTree Repositories
Mon, Mar 31st 2014 4:46a   Sean Cull
When we use JAR files such as DocX4J for exporting from XPages we need to store these within the git repositories so that the developer can add them to their /jvm/lib folder when building the XPage application. If the correct jars are not present the build fails. The files are stored in a /jar folder away from the /notes folder where the Noes design elements are. We also use a /documentation folder for user guides etc.. When you add these jar or zip files to the repo they do not appear in Source
7
Reflections on Engage by Blug
Sat, Mar 22nd 2014 1:35p   Sean Cull
Engage – probably the best user group in the world I was very lucky to attend and speak at the fantastic Engage conference this week. I found it a truly uplifting experience.I have been full time in Notes / XPages for 14 years now but have only been able to get to LotusSphere / Connect once. These regional events are where I get my enthusiasm and ideas batteries recharged and come away with some great ideas about how to move forward with the ICS platform. The things that impressed me the m
2
Draft Engage / BLUG Slides – Seeing the Wood for the Trees
Sun, Mar 16th 2014 9:38a   Sean Cull
I am very honored to be speaking at the fantastic Engage User Group ( formerly known as BLUG ) this week. The session is called “Seeing the Wood for the Trees” and is about how I and my colleagues use Domino Designer, Git Source Control and some mostly Atlassian products to manage our help tickets, project management, release management and billing. The session is at 14:45 on Tuesday and is 50% slides / 50% live demo. As I have learnt to my cost before it is difficult to go into Sour
5
Users losing authenticated access to XPage Apps when using SSO / LTPA Tokens [solved]
Wed, Feb 5th 2014 11:44a   Sean Cull
One of our keenest users at a customer site was getting very frustrated because they kept loosing edits to documents late on a morning. We checked our session time outs and our "Keep Alive" custom co
3
A bit of Christmas Cheer
Sun, Dec 15th 2013 6:47a   Sean Cull
A couple of years ago my wife Jane got a bit bored ( with work – not me – I hope ) and decided to teach herself iOS programming. At the time I was a bit sceptical ( she was not an IT person ) but I am please to say that my scepticism was unfounded. Jane’s latest app is now out in the iTunes App Store. Its free so take a look and if you get the chance please give it a rating. It was a whole family affair. She stole ( literally ) my Mac, I provided cups of tea, she did the p
4
GIT is coming together ( at last )
Thu, Nov 28th 2013 2:04p   Sean Cull
I have been on a mission for us to use GIT with our XPages and Notes work for about 10 months now. And it is just getting to the point where it is coming together nicely although it has been a LOT of hard work. We still have issues like the previous post but it is working well. The latest step change was integrating our GIT repository ( bitbucket.org ) with JIRA which is the ticket system / agile board that we use. Referencing a JIRA ticket in the GIT commit messages now shows the specific
3
Connect 2013 Podcasts
Sat, Dec 15th 2012 3:19a   Sean Cull
I have a dirty secret With the lack of ICS / Lotus community podcasts I have begun to listen to SharePoint community podcasts – there I said it, its off my chest now – they say daylight is the best disinfectant. And I actually really like them. This one is a crowd of MS MVPs ( a bit like IBM Champions ) reflecting on the state of SharePoint in a studio set aside for them by Microsoft at their equivalent of Connect. The podcast is vibrant, positive but also realistic – peop
9
SNTT / Notesin9 – Installing Domino 8.5.3 UP1 FP3 on CentOS / RHEL 6.3 64 bit
Mon, Dec 3rd 2012 1:00a   Sean Cull
I have just finished recording a video on Installing a Domino Sandbox on Linux for David Leedy at Notes in 9. Update : David has now posted the video The video should be posted in the next week or so. I have pitched it at developers with no experience of Linux and perhaps not much experience on Domino installs. I would normally recommend Red Hat Enterprise Linux but on this occasion I used CentOS because I wanted to provide the easiest possible path to a developer wanting to deploy a Domi
3
[solved’ish] @getprofilefield not working in embedded outline computed backgrounds
Fri, Nov 30th 2012 6:37a   Sean Cull
Just a quick one for anyone getting an ECL / Notes Execution Alert from -No Signature- on -not known- with the action GetProfileField This can come from using @getprofilefield for a “hide when” – which IBM has no plans to fix – http://www-01.ibm.com/support/docview.wss?uid=swg21247497 or, as has taken me a while to discover, if you use profile fields to set the background colour on outlines which IBM may fix – http://www-01.ibm.com/support/docview.wss?uid=swg1LO
9
[Solved] Black screen on bootup for Windows 7 VMWare Fusion Bootcamp VM when using displaylink USB drivers
Thu, Nov 22nd 2012 1:51p   Sean Cull
This is a quick post to hopefully remind me of how I fixed this problem once I forget, Background We are moving to using Bootcamp on our Macs so as to get the full power of the Mac for the Domino Designer client, it makes a big difference but I will post more on that later. On the Mac I use a Displaylink USB adapter to power one monitor while the other is plugged directly into the Mac – why Mac haven’t sussed sub 27″ multi-monitor working baffles me but hey, I’m only
3
A Fresh Insight from a User Group
Fri, Sep 7th 2012 2:00a   Sean Cull
Almost all of the people reading this love their User Groups. For us it is a chance to meet old friends and reaffirm our belief in the products that we build our work around. I was at the fantastic UKLUG this week but this time it was a different experience for me. I was lucky enough to be there with a new colleague from outside the ICS community who will be joining our company in November. Although Jane has been a very IT literate Lotus Notes user for 15 years she is a “Line of Busin
1
Book Review – XPages Extension Library – 4/5
Thu, Jun 28th 2012 2:00a   Sean Cull
I was recently given a copy of the latest XPage book to review and I have found it a very worthwhile read in many ways but also a bit frustrating. The book was written by some of the best experts in the XPages community, talented developers that use XPages day in and day out and people who regularly present at the User Groups and Lotusphere. They are also people that are also particularly generous with sharing their knowledge within the community via blogs and wikis. One of the key benefits o
6
SSL Certificate installation errors – copy the key from the email source
Wed, Jun 20th 2012 1:05p   Sean Cull
I have been pulling my hair out trying to get a Globalsign / 123reg SSL certificate installed on a Domino server. It’s something I have done a few times but this time I was stumped. What was different was that this SSL provider emails the certificates as plain text which you can then paste into the dialog in the Server Certificate Admin application. In the past I have always either downloaded certificate files or copied the text from a web portal. I realised what was going wrong when




Created and Maintained by Yancy Lent - About - Planet Lotus Blog - Advertising - Mobile Edition