Solved

How to Export SSL Certificate and Key and convert to PEM format

Posted on 2004-09-16
7
11,994 Views
Last Modified: 2013-11-16
I'm trying to install a SSL acceleration appliance in front of  Domino 6.0 to 6.5.2 servers. In order to get it done I need to export the current SSL certificates and keys currently installed in the Domino server and convert them (using OpenSSL for example) to PEM format so I can install them into the SSL appliance.
Is this possible or Domino uses some proprietary format that can't be converted using openssl?
If it is, how can I export them and what is the exported format (the OpenSSL conversion part I can handle)?
0
Comment
Question by:alexrs
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
7 Comments
 
LVL 15

Expert Comment

by:Bozzie4
ID: 12081681
You can find them in the Domino server's data directory as keyfile.kyr (and a second file with the same name / other extension, I forgot which extension)

cheers,

Tom
0
 

Author Comment

by:alexrs
ID: 12088322
OK, but what are their format? I need them to be converted to base-64 (PEM) format.
0
 
LVL 15

Expert Comment

by:Bozzie4
ID: 12120289
Actually, I think it may be impossible for self-certifified certs.  But if you purchased 1 from a vendor (Globalsign/Verisign), you should have received it in a format you can handle....

cheers,

Tom
0
 

Author Comment

by:alexrs
ID: 12123039
I found the answer at IBM support site. Currently it's not possible to export a SSL key (like in MS IIS, Apache or Netscape)

http://www-1.ibm.com/support/docview.wss?rs=463&context=SSKTMJ&q1=export+ssl+certificate&uid=swg21097215&loc=en_US&cs=utf-8&lang=en

Can You Extract the Private Key from a Lotus Domino Key File (*.KYR)?
Technote (FAQ)

Problem
Is it possible to extract or export the private key from a Domino key ring file (*.KYR)? For example, you've included a VeriSign certificate in a Lotus Domino server's key ring file and wish to share its private key with another non-Domino Web server. Or another example would be if you wish to use Microsoft's Internet Security and Acceleration (ISA) Server, which uses an exported private key to serve SSL from the Web server(s) behind it.


Solution
This issue has been reported to Lotus software Quality Engineering as an enhancement request. Currently Domino does not provide functionality for exporting private keys from the key ring file on a Domino server.

Supporting Information:
If you wish to use Microsoft ISA server, consider using Microsoft IIS as the HTTP stack for Domino (also called Domino for IIS). Because Microsoft IIS works with the ISA server, if you use IIS as the HTTP stack for Domino you can obtain this functionality. For more information on using Microsoft ISA server, refer to the following article on the Microsoft Support site (http://support.microsoft.com):

      "How to Set Up Internet Security and Acceleration Server to Host Web Sites by Using the Secure Sockets Layer Protocol"
      Article # 292569
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 12515352
PAQed with points refunded (500)

Computer101
EE Admin
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For Desktop Techs: How to retain a user's Notes configuration data when swapping out the end user's computer. (Assuming that you are not upgrading to a completely different version of Notes client) All you need to do is: 1) install Notes o…
I thought it will be a good idea to make a post as it will help in case someone else faces these issues. I trust this gives an idea how each entry in Notes.ini can mean a lot for the Domino Server to be functioning properly. This article discusses t…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question