Installation of a wildcard SSL : HTTP Server: SSL handshake failure, no SSL Keyring file specified for IP address [...]

since chrome 68 version , we need now to install SSL on all HTTP servers.

So , I installed a SSL certificate wildcard *.domain.com on the servers (keyfile-SRV.kyr + keyfile-SRV.sth)

Server : Domino 9.01FP5 for Linux64

I configured all the servers/internet sites documents and servers documents
in the document "servers/internet sites " in field “Host names or addresses mapped to this site:” there is “domain.com
NOTE : in HTTP the configuration find and use correctly all the parameters in the documents “servers/internet sites”

“tell http show security” display :

Web Site: domain.com (domain.com)
SSL enabled
Key file name: /home/local/notesdata/keyfile-SRV.kyr

accessing https://domain.com https://domain.com give the error :

HTTP Server: SSL handshake failure, no SSL Keyring file specified for IP address […]

NOTE : If we enter the ip address in the document "servers/internet sites " in field “Host names or addresses mapped to this site:” the SSL work perfectly and https://domain.com https://domain.com work

NOTE : If we enter the keyring certificate configuration in the DEFAULT document “servers/internet sites” , the SSL work perfectly and https://domain.com https://domain.com work

but we have many servers and several SSL certificate per server, so we cannot use this configuration

the SSL system seem have a problem to load the configuration by using the domain name but work well by using the IP. HTTP do not have any problem.

Is someone have installed a wildcard SSL and configured “servers/internet sites” with domains names ?

what can generate this problem ?

Subject: You need a separate IP for each SSL enabled site.

Only one SSL enabled Internet Site document is allowed per IP address.

And you will want to enter the ip address in the document "servers/internet sites " in field “Host names or addresses mapped to this site:”

Internet Site documents work by retrieving the Host header sent by the client. For a Web browser, this Host header is the server name or IP address entered in the URL. Domino compares this header to the Internet Site documents and uses the matching site (or the default if no specific match).

See this technote → http://www-01.ibm.com/support/docview.wss?uid=swg21173919 http://www-01.ibm.com/support/docview.wss?uid=swg21173919

Subject: thanks a lot

Thanks a lot, the answser is very clear