Domino 9.0.1 FP3 desabilita SSLv2

Hoje recebi uma ligação de um cliente, com problemas de acesso via LMC 6.1.4 (Lotus Mobile Connect).

Ao chegar, verifiquei que eles atualizaram o Domino 9.0.1 para FP3, que desabilita as cifras SSL v2 para dar lugar ao TLS 1.0, solução provida para proteger o ambiente de possíveis ataques POODLE.

Até ai tudo bem, se ao Desabilitar o suporte ao SSL o Fix Pack não desabilita o SSLv3 para habilitar o TLS, para isto foi necessário aplicar o IF3 e adicionar a seguinte linha no notes.ini DISABLE_SSLV3=1 para desabilitar o SSLv3, e deixar apenas o TLS funcionando. Também foi necessário adicionar a linha SSL_ENABLE_INSECURE_SSLV2_HELLO=1, pois o certificado do site estava com problemas, e o servidor não estava aceitando o certificado auto-assinado como confiável.

Além de configurar o Domino foi necessário desabilitar as cifras do SSLv2 no LMC e habilitar as cifras padrão para TLS e SSLv3 no LMC, conforme imagem abaixo. (ao clicar no standard ciphers, desmarque as cifras referentes ao SSL v2)

PS.: Não esqueça de reiniciar o LMC e o HTTP do Domino

Comentários

Postagens mais visitadas deste blog

Querendo aprender Design Thinking?

Segue uma lista interessante para você sobre Design Thinking. Canal do You Tube - Rodrigo Giaffredo https://www.youtube.com/channel/UCiZGIBd46d1EiVvlMVxkmkA?sub_confirmation=1 EXTERNAL RESOURCES IBM Design Thinking http://www.ibm.com/design/thinking/ IBM Design Language http://www.ibm.com/design/language/inspiration How It Works: Design Thinking - IBM Think Academy https://www.youtube.com/watch?v=pXtN4y3O35M Tim Brown: Designers -- think big! http://www.ted.com/talks/tim_brown_urges_designers_to_think_big#t-14620 IDEO Design Thinking http://designthinking.ideo.com/ Using Design Thinking to Design Business Models: http://labs.sogeti.com/using-design-thinking-to-design-business-models/ Remote Design Thinking https://medium.com/remote-design-thinking d.school bootcamp bootleg http://dschool.stanford.edu/wp-content/uploads/2011/03/BootcampBootleg2010v2SLIM.pdf Design Kit Org http://www.designkit.org/ http://www.designkit.org/methods The Field Guide to Human-Centered Design http://www.des...

Running Domino Administrator and Domino Designer on a MAC

I'm running Domino Designer and Domino Administrator on macOS Catalina 10.15.3. Prerequisites : - CrossOver 19.0.1 - Domino 10.01 Client Installer Steps : 1. create a bottle with Windows 7 32 bit 2. Install: - Main sources - Adobe Flash 18 - Visual C ++ 2005 8.0 SP1 - SDK 1.1 3. Install Domino 10 client Problems : - eventually an error message appears with a window, just click ok Tips : - when executing the designer for the first time, note that there will be a hidden window, which prevents you from clicking on the operation. Check not to warn anymore and it's ok.

How to install HCL Sametime V11

How to install Sametime V10 - a series of blog posts by Gabriella Davis : Installing Sametime V10 Limited Use (including MongoDB) Installing Sametime V10 - The Proxy Server (WAS based Proxy Server) How to install Sametime V11 Official documentation How to set autostart for Sametime V11 Proxy Server (Tomcat): Windows , Linux How to enable business cards photos Configuring Sametime V11 - a series of blog posts by Roberto Boccadoro : Integrating Sametime 11 with iNotes and Verse on Premises How to allow access to mobile clients Enabling person photo in the client (and related problem solution ) What to do if file transfer is not working Replace self-signed certificate in Sametime...

Connection's Blog

Pesquisar este blog