HELP! DOLS Cross Certificate error

I am re-posting this because my previous posting didn’t caugh atention.

I have an application that use DOLS and I am getting cross-certification errors when an agent run.

however, I am able to bypass the error if I copy the Notes Certificate (/DOLS - /DOLS) and the Notes Cross-certificate (/DOLS - /MyDomain) in the Offline Directory (dolnames.nsf).

My question is:

Why the DOLS synchronization didn’t copy the certificate information in the offline names?

How that can be force? What setting I am missing that force the replication of the cross-certification?.

Irely Roa.

Subject: HELP!! DOLS Cross Certificate error

This is a known issue that has been submitted to Lotus Development and has been fixed in Domino 7.0.3 and 8.0.1.

Clayton Markos

Software Engineer

IBM Certified Advanced System Administrator - Notes/Domino

IBM Software Group, Lotus

Subject: How about 7.0.3FP1?

In the hopes that Clayton is still monitoring…

We upgraded from 7.0.1FP1 with no problems with cross-certificate issue (SPR# PTRI6X4QD7) to 7.0.3FP1 and now receive the warning…

Is there some setting I don’t know about that I must set to not get the error now???

Help?

Subject: RE: How about 7.0.3FP1?

hi Brendan,

Can you provide a little more detail??

Subject: More detail…

Sorry, I hadn’t monitored this thread in a little while… I’d love to provide more detail. Obviously, there have been some Domino development issues with this, and, as a developer, I know that without specific examples, it can sometimes be very difficult to diagnose and fix.

We had developed a web application that also works off-line. Our servers were using 7.0.1FP1. We use extensive use of AJAX (usually via an agent) to serve appropriate content and appropriate times.

Due to other issues, Lotus support suggested we upgrade to 7.0.3 (and SSL, HTTP caching issue I think), so we upgraded the servers to 7.0.3FP1 on our development servers. When I took an off-line copy (previously had uninstalled sync manager), I received the new DOLS “client” executables. After the subscription was complete, I began to receive the cross cert error (where we previously had not) when retrieving content via an agent.

Our work around was to replace the DOLS downloadable files (I believe in the Domino\HTML directory) with the files from the 7.0.1FP1 install. Sorry, I’m not the admin that did this, but if you need more specifics, please feel free to contact me.

bphiggins uhs com

Subject: RE: How about 7.0.3FP1?

Clayton,

I upgraded from 6.5.2 to 7.0.2, started getting the Cross Cert error. Reading these posts, I then upgraded to 7.0.3, same error, installed 7.0.3 FP1, same error.

I am now downloading to install 7.0.1 to hopefully solve the problem.

I can’t upgrade my servers with this error. My company is looking at options to dump Domino, and this is not helping my cause. Is there a fix for the Cross Cert error, that is easy to apply. My users are all remote, some on oil rigs in the Gulf of Mexico and in Alaska. They are not technical, and I can’t easily access their laptops.

I need DOLS to be on a 7.0.X version, that is reliable and doesn’t require special configurations.

Thanks

Deb

Subject: FIXED!

This tech note from IBM fixed our Cross Cert error in DOLS 7.0.X:http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21306798

We had everything in this tech note correct, except number 3, so completing that step has solved our cross cert issue.

I have not upgraded to 7.0.3 fix pack 1, and DOLS is working as expected.

Subject: HELP!! DOLS Cross Certificate error

Hi Irely, I am seeing this same behavior. At first I thought it was because I was not setting something correctly in the configuration. So I went back and compared it with a DOLS installation I had done previously and could find no differences. I suspect that the problem is related to version 7.0.2 of DOLS. I was using DOLS fine with version 6.5 and only noticed this problem when installing DOLS from a 7.0.2 server. I am going to try and replace the DOLS files on my 7.0.2 server with ones from my 6.5.3 server to see if I can prove that this is the case. If everything works with the same settings from a 7.0.2 server with the only difference being that I am using the 6.5.3 DOLs installation files, then I think I will have to conclude that Lotus has broken something in 7.0.2 of DOLS.

Subject: Work Around (was: HELP!! DOLS Cross Certificate error)

I have run some tests and it appears that this error message relates to version 7 of DOLS. I tried copying the DOLS installation files from the Domino\Html directory of a 6.5.3 server to a 7.0.2 server and re-installing a subscription. Everything worked properly. No cross certificate error. The only problem I did run into was that I had to uninstall the Offline Services ActiveX plugin for the browser and allow it to re-install (otherwise there was a dll file conflict).

Subject: RE: Work Around (was: HELP!! DOLS Cross Certificate error)

Thanks for reply … Because I didn’t get response (and I didn’t know your solution) I did another work around. I created a custom DOLS Names address book that have the Cross Certification document between our main domain and the DOLS Cert Id.

I created it using this technote as reference http://www-1.ibm.com/support/docview.wss?rs=0&q1=1175592&uid=swg21175592&loc=en_US&cs=utf-8&lang=

Fix the cross certification wasn’t the reason for that technote but allow me to move on.

Now, I know that when DOLS is installed one of the default files that is pushed in the subscription is the i_DOLNAMES.exe, I think that file do not have that cross certification and I don’t know if it is “normal” that you fixed it.

In the meantime I am going to used my Custom Service to push my “fixed” names address book.

Irely Roa.

Subject: RE: Work Around (was: HELP!! DOLS Cross Certificate error)

Hi Chris Do you still believe that copying the DOLS installation files from 6.5.3 to 7/0/2 has resolved the [roblem? We upgraded our Server from R6.5.2 to R7 and are having the same problem with new users.

We also get the error with the DOLS ActiveX control with existing DOLS users…asking Users to upgrade the control. How have you resolved that…by uninstalling the existing control and then re-subsbibing to download the new one?

We also feel that its a bug. Have you logged the problem with Lotus for resolution?

Thx in advance for any help.

Subject: HELP!! DOLS Cross Certificate error

Have you been able to determine why the certificate info wasn’t copied over during synchronization? We upgraded our Server from R6.5.2 to R7 and are having the same problem with new users.

We also get an error with the DOLS ActiveX control with existing DOLS users…asking Users to upgrade the control. Did you encounter that as well?