Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a customer with an IBM Domino server. They offer a way to export SSL keys but in a weird proprietary format. Any idea on how to convert those to OpenSSL?

Basically I need to upload this key to an intermediate device that will do inspection and security. If I can bring it to OpenSSL, I'm golden.

share|improve this question
How do you know its a proprietary format? There are several 'standard' file formats - perhaps you could provide a link to an exported (public or self-signed) certificate, then perhaps people would be able to see for themselves? – symcbean Jan 12 '11 at 12:50
Better yet, a link to some documentation... – AviD Jan 12 '11 at 13:51
up vote 2 down vote accepted

If you are referring to the .kyr format, you can use a tool thats part of websphere called iKeyman (

A quick overview of what you need to do can be found here:

share|improve this answer
That seems to be the correct answer. I will see if it works. Thanks for your help! – Alex Jan 13 '11 at 23:06

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.