letsencrypt 4 domino - sutol...9th sutol conference, november 2017 ulrich krause •lotus notes /...

16
9 th Sutol Conference, November 2017 LetsEncrypt 4 Domino: správa certifikátů v IBM Domino bez starost Ulrich Krause midpoints GmbH, Nemecko

Upload: others

Post on 20-Jun-2020

11 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

LetsEncrypt 4 Domino: správa certifikátů v IBM Domino

bez starost

Ulrich Krause

midpoints GmbH, Nemecko

Page 2: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

Ulrich Krause

• Lotus Notes / Domino since 1993

• Developer/ Administrator

• IBM Champion 2010 – 2016

• OpenNTF Contributor

• Let‘s Encrypt 4 Domino ( LE4D )

Page 3: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

Use HTTPS or a kitten will die!

https://transparencyreport.google.com/https/overview

Page 4: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

Self signed vs. CA verified certificates

• Self signed certificates are not a bad thingat all

• Can be used to encrypt traffic.

• A CA tells your customers that this server information has been verified by a trusted source, and not just the company who owns the website.

• Important, if you collect confidential information.

4

Page 5: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

Self signed vs. CA verified certificates

5

Page 6: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

Let‘s Encrypt

6

Page 7: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

How it works

7

Page 8: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

ACME Client Implementations

8

Page 9: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

And IBM Domino ??

9

Page 10: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

And IBM Domino ??

10

Page 11: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

11

Page 12: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

LetsEncrypt 4 Domino (LE4D)

12te amgr run 'midpoints/le4domino.nsf' 'letsencrypt'

Page 13: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

LE4D in action

13

Page 14: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

How do I get it?

• https://www.midpoints.de/de-solutions-LE4D

14

Page 15: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

Use HTTPS – NO excuse !!

15

Page 16: LetsEncrypt 4 Domino - Sutol...9th Sutol Conference, November 2017 Ulrich Krause •Lotus Notes / Domino since 1993 •Developer/ Administrator •IBM Champion 2010 –2016 •OpenNTF

9th Sutol Conference, November 2017

Ulrich KrauseDeveloper

midpoints GmbH

[email protected]