There are many things that are just better in Domino 14.5 than any previous version of Domino. But even looking at something last week on Domino 14 I was reminded that sometimes simple functional updates that have been made to make life easier.
So from Domino 14, Cert Manager certs integrate seamlessly with REST API. Previously you could export certs as pfx or pem files, and manually copy them across to the host. (after updating a JSON file).
If you were using a free Lets Encrypt cert integrated with CertMgr, this would need to be done at least every three months. A manual task that can be a pain (may often be forgotten etc).
Well, from Domino 14 – all can be integrated so whatever is in CertMgr can just be picked up by the REST API. No more updates every few months. It’s super easy to implement.
There’s a once off task to simply include a couple of lines in a JSON file in the <Domino Data Directory>\keepconfig.d\ directory
{
"TLSCertStore" : true,
"TLSCertStoreName" : ["subdomain.domain.com"]
}
where subdomain.domain.com is for a cert you already have updating in CertManager. (you can list multiple URLs here separated by a comma within the square brackets) like:["subdomain.domain.com", "anotherdomain.com"]
Creating a JSON file sounds more complicated than it is if you’ve never done it. Just create a text file put the above information in (modifying the information to your site) and save as a .json file in the directory listed above. It doesn’t matter what its called but the sensible thing would be to call it something that indentifies it. Like TLSfromcertmanager.json (or similar).
Full documentation of it is here
Cormac McCarthy – Domino People Ltd
