Domino Container - Replay Domino and JVM cacerts
Daniel Nashed – 22 October 2026 20:50:50
The Domino container image had certificate management for a while already.
But it was intended to add certificates and not remove them.
Removing certificates could be tricky. There are commands to do it.
But you have to hit the right certs in an automated way.
The new option allows to provide your own curated certificate list which will be always set when you provide it.
The functionality to add certificates still remains. The file will be replaced first and then the optional addition to the trust stores is executed.
What I am not changing is the Linux trust store.
Usually customers should build their specific base image with their OS level changes which are usually company wide.
So I am staying away from it for now unless someone has a strong requirement for it.
Different distributions have their own way to manage certs.
I added a cert addition. So I could build the replacement.
The container Linux layer is usually not used for any directly for client connections.
You find the documentation here:
https://github.com/HCL-TECH-SOFTWARE/domino-container/tree/main/dockerfiles/install_dir_domino/custom
-- Daniel
- Comments [0]
![[HCL Domino]](../lotus-domino.gif){kind=small}
![[Domino on Linux]](../domino-linux.gif){kind=small}
![[Nash!Com]](../nashcom.gif){kind=small}
![[Daniel Nashed]](../daniel-nsh.gif){kind=small}