Why can't I connect to iNotes on new installations of Lotus Foundations Start?
The program that generates the SSL certificate uses Unix epoch time to set the expiry date 27 years from the installation date. The Unix epoch is a number which represents the number of seconds since midnight UTC, 1 January 1970. An issue with using Unix epoch time is that it will roll over in 2038 on 32 bit systems. This means that the current installation program generates an SSL certificate which has already expired.
Resolving the problem
- Download the attached sslsetup.nsf file.
- Log into your server's WebConfig as an administrative user.
- From the left menu click the Add-ons menu item.
- From the Actions click the edit icon for the domino Add-on.
- Change the Add-on Automatic Start: radio button to Disable.
- Click the Save Changes button. This will shutdown Domino.
- Using an administrative account, connect to the notes team's file share.
- Navigate to the notesdata directory.
- Delete the CAKey.kyr, keyfile.kyr, keyfile.sth and <orgname>Cert.nsf. The last file contains the first four character from the domain of your organization. For example if your organization is example.com then the file name would be examCert.nsf.
- Copy the sslsetup.nsf file into this directory overwriting the existing file.
- Go back to WebConfig and set the Add-on Automatic Start: radio button back to Enable.
- Click the Save Changes button. This will start Domino.
When Domino restarts it will rerun the SSL setup, afterwhich you will be able to log into iNotes on port 4443.
|Messaging Applications||Lotus End of Support Products||Lotus Foundations Branch Office|