How to Export SSL Certificate and Key and convert to PEM format

I'm trying to install a SSL acceleration appliance in front of  Domino 6.0 to 6.5.2 servers. In order to get it done I need to export the current SSL certificates and keys currently installed in the Domino server and convert them (using OpenSSL for example) to PEM format so I can install them into the SSL appliance.
Is this possible or Domino uses some proprietary format that can't be converted using openssl?
If it is, how can I export them and what is the exported format (the OpenSSL conversion part I can handle)?
alexrsAsked:
Who is Participating?
 
Computer101Connect With a Mentor Commented:
PAQed with points refunded (500)

Computer101
EE Admin
0
 
Bozzie4Commented:
You can find them in the Domino server's data directory as keyfile.kyr (and a second file with the same name / other extension, I forgot which extension)

cheers,

Tom
0
 
alexrsAuthor Commented:
OK, but what are their format? I need them to be converted to base-64 (PEM) format.
0
 
Bozzie4Commented:
Actually, I think it may be impossible for self-certifified certs.  But if you purchased 1 from a vendor (Globalsign/Verisign), you should have received it in a format you can handle....

cheers,

Tom
0
 
alexrsAuthor Commented:
I found the answer at IBM support site. Currently it's not possible to export a SSL key (like in MS IIS, Apache or Netscape)

http://www-1.ibm.com/support/docview.wss?rs=463&context=SSKTMJ&q1=export+ssl+certificate&uid=swg21097215&loc=en_US&cs=utf-8&lang=en

Can You Extract the Private Key from a Lotus Domino Key File (*.KYR)?
Technote (FAQ)

Problem
Is it possible to extract or export the private key from a Domino key ring file (*.KYR)? For example, you've included a VeriSign certificate in a Lotus Domino server's key ring file and wish to share its private key with another non-Domino Web server. Or another example would be if you wish to use Microsoft's Internet Security and Acceleration (ISA) Server, which uses an exported private key to serve SSL from the Web server(s) behind it.


Solution
This issue has been reported to Lotus software Quality Engineering as an enhancement request. Currently Domino does not provide functionality for exporting private keys from the key ring file on a Domino server.

Supporting Information:
If you wish to use Microsoft ISA server, consider using Microsoft IIS as the HTTP stack for Domino (also called Domino for IIS). Because Microsoft IIS works with the ISA server, if you use IIS as the HTTP stack for Domino you can obtain this functionality. For more information on using Microsoft ISA server, refer to the following article on the Microsoft Support site (http://support.microsoft.com):

      "How to Set Up Internet Security and Acceleration Server to Host Web Sites by Using the Secure Sockets Layer Protocol"
      Article # 292569
0
All Courses

From novice to tech pro — start learning today.