Fixes for IBM Notes and Domino regarding POODLE and SHA-2 available

Detlev Poettgen  November 4 2014 08:20:14 AM

IBM has released interim fixes for IBM Notes and Domino 8.5.x and for 9.0.x tonight that address the POODLE SSL3/TLS1.0 and SHA-2 issues.

The fixes are available for all supported platforms and releases (9.0.1 FP2, 9.0, 8.5.3 FP6, 8.5.2 FP4, 8.5.1 FP5).
But you should be aware that SHA-2 support is only available for Domino 9.0.x.  

You can find the common description here which include reference links for the downloads.
http://www-10.lotus.com/ldd/dominowiki.nsf/dx/IBM_Domino_TLS_1.0

This document describes the usage of the keyring file in that context.
http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Domino_keyring

Looking for further information? Go here.
http://www-10.lotus.com/ldd/dominowiki.nsf/xpViewTags.xsp?categoryFilter=SHA-2
http://www-10.lotus.com/ldd/dominowiki.nsf/xpViewTags.xsp?categoryFilter=TLS

If you are using SSL on your servers the installation is recommended! But I would wait to install it on production systems for a few days, after we all will have received some feedbacks. It it not always good to be the first one ;-)

Thanks to IBM and specially to Dave Kern,  who did a great job in a very short time!
The security team at IBM had been already working on TLS and SHA-2 support before POODLE came up, but had to change their plans (which was 9.0.2 as the target release), because of the short term move to diable SSL 3.0 in browsers and other software.

Dave, thank you very much to make this possible!

PS: Hope TLS v1.2 will be available soon, too.

Update:

Added Download Links:

8.5.3:   http://www-01.ibm.com/support/docview.wss?uid=swg21663874
9.0.1:  http://www.ibm.com/support/docview.wss?uid=swg21657963

• Kommentare [2]