I have a customer with an IBM Domino server. They offer a way to export SSL keys but in a weird proprietary format. Any idea on how to convert those to OpenSSL?

Basically I need to upload this key to an intermediate device that will do inspection and security. If I can bring it to OpenSSL, I'm golden.

  • How do you know its a proprietary format? There are several 'standard' file formats - perhaps you could provide a link to an exported (public or self-signed) certificate, then perhaps people would be able to see for themselves? – symcbean Jan 12 '11 at 12:50
  • Better yet, a link to some documentation... – AviD Jan 12 '11 at 13:51

If you are referring to the .kyr format, you can use a tool thats part of websphere called iKeyman (ftp://ftp.software.ibm.com/software/lotus/tools/Domino/gsk5-ikeyman.zip).

A quick overview of what you need to do can be found here: http://labs.groupwave.be/index.php/2009/08/31/exporting-kyr-certificate-for-apache/

  • That seems to be the correct answer. I will see if it works. Thanks for your help! – Alex Jan 13 '11 at 23:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.