Setting up the Web Navigator to retrieve pages on sites secured by SSL
For users to access Web sites that are secured by SSL, you must set up the Web Navigator to retrieve pages on these sites. The Web Navigator server does not need to use SSL in order to retrieve pages from a Web site that uses SSL.
About this task
To set up the Web Navigator server for SSL, do the following:
- Store the Web site's SSL certificate in the Domino® Directory on the Web Navigator server.
- Enable the HTTPS protocol on the Web Navigator server as an Internet service.
The Web Navigator supports sites that have SSL certificates issued by the RSA Certificate Authority (CA), so you do not need to obtain the Web site's SSL certificate if it was issued by the RSA CA. If the Web site does not have a certificate issued by the RSA CA, you must obtain the Web site's certificate and add it to the Domino Directory on the Web Navigator server. Obtaining the certificate from a secure location ensures that the certificate you receive is valid and creates an optimally secure environment by allowing access only to servers with which you share a valid certificate.
Although not recommended, you can set up Web Navigator to add the Web site's SSL certificate automatically to the Domino Directory. Set up this way, the Web Navigator allows users to access pages on any Web site that uses SSL, even if the Domino Directory does not already contain the certificate. This approach allows easy access for users, but compromises the security of the data sent by users, since the server does not verify the identity of the remote server before allowing the user to access it.
To add specific certificates
Procedure
- Identify the certificate required by the secured Web site by browsing to the site and obtaining the certificate name.
- Use a Notes® workstation to obtain a trusted root certificate and merge the certificate for the CA into the Domino Directory.
- On the HTTPS for the Services field. tab of the Server document, select
To add certificates automatically
Procedure
- From the Domino Administrator, click the Configuration tab, and then open the Server document for the Web Navigator server.
- Click the Yes for the Accept SSL site certificates field tab and choose
- Click the HTTPS for the Services field, and then save the document: tab, and choose