OK, but what are their format? I need them to be converted to base-64 (PEM) format.
Main Topics
Browse All TopicsI'm trying to install a SSL acceleration appliance in front of Domino 6.0 to 6.5.2 servers. In order to get it done I need to export the current SSL certificates and keys currently installed in the Domino server and convert them (using OpenSSL for example) to PEM format so I can install them into the SSL appliance.
Is this possible or Domino uses some proprietary format that can't be converted using openssl?
If it is, how can I export them and what is the exported format (the OpenSSL conversion part I can handle)?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I found the answer at IBM support site. Currently it's not possible to export a SSL key (like in MS IIS, Apache or Netscape)
http://www-1.ibm.com/suppo
Can You Extract the Private Key from a Lotus Domino Key File (*.KYR)?
Technote (FAQ)
Problem
Is it possible to extract or export the private key from a Domino key ring file (*.KYR)? For example, you've included a VeriSign certificate in a Lotus Domino server's key ring file and wish to share its private key with another non-Domino Web server. Or another example would be if you wish to use Microsoft's Internet Security and Acceleration (ISA) Server, which uses an exported private key to serve SSL from the Web server(s) behind it.
Solution
This issue has been reported to Lotus software Quality Engineering as an enhancement request. Currently Domino does not provide functionality for exporting private keys from the key ring file on a Domino server.
Supporting Information:
If you wish to use Microsoft ISA server, consider using Microsoft IIS as the HTTP stack for Domino (also called Domino for IIS). Because Microsoft IIS works with the ISA server, if you use IIS as the HTTP stack for Domino you can obtain this functionality. For more information on using Microsoft ISA server, refer to the following article on the Microsoft Support site (http://support.microsoft.
"How to Set Up Internet Security and Acceleration Server to Host Web Sites by Using the Secure Sockets Layer Protocol"
Article # 292569
Business Accounts
Answer for Membership
by: Bozzie4Posted on 2004-09-16 at 22:58:30ID: 12081681
You can find them in the Domino server's data directory as keyfile.kyr (and a second file with the same name / other extension, I forgot which extension)
cheers,
Tom