Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 4 down vote favorite

I have a customer with an IBM Domino server. They offer a way to export SSL keys but in a weird proprietary format. Any idea on how to convert those to OpenSSL?

Basically I need to upload this key to an intermediate device that will do inspection and security. If I can bring it to OpenSSL, I'm golden.

share|improve this question
How do you know its a proprietary format? There are several 'standard' file formats - perhaps you could provide a link to an exported (public or self-signed) certificate, then perhaps people would be able to see for themselves? – symcbean Jan 12 '11 at 12:50
Better yet, a link to some documentation... – AviD♦ Jan 12 '11 at 13:51

1 Answer

up vote 2 down vote accepted

If you are referring to the .kyr format, you can use a tool thats part of websphere called iKeyman (ftp://ftp.software.ibm.com/software/lotus/tools/Domino/gsk5-ikeyman.zip).

A quick overview of what you need to do can be found here: http://labs.groupwave.be/index.php/2009/08/31/exporting-kyr-certificate-for-apache/

share|improve this answer
That seems to be the correct answer. I will see if it works. Thanks for your help! – Alex Jan 13 '11 at 23:06

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.