Problems importing wildcard certificate for SSL iNotes usage

HCL Domino Domino Forum
1

I have a wildcard certificate for my domain used for company web server (IIS7).

I want to import this certificate to domino in order to use SSL when our users access their email.

On the internet I found a lot of documentation but none of them helped me to solve the problem.

Basically I started with the guide from turtleweb http://www.turtleweb.com/turtleblog.nsf/dx/11022009232215GDAVGR.htm?opendocument&comments http://www.turtleweb.com/turtleblog.nsf/dx/11022009232215GDAVGR.htm?opendocument&comments .

My questions:

  • is there any program other that very old (and unusable on modern certificates) gsk5-ikeyman which properly works with IBM .kyr keyring container? My certificate is Keylength: 2048, signature algorithm:SHA256RSA from Geotrust and what i found after a lot of tests is that gsk5-ikeyman does not support SHA256. The majority of internet certifiers now switched to sha256 signature. The newer versions of ikeyman does support SHA256 but doesn’t know how to handle .kyr container.

Anyway I loose a lot of time trying to resolve this problem and it’s frustrating.

Please help with any ideas…

Regards,

Adrian

2

Subject: Thank you for suggestions

My first choice was to install IBM Http via Domino setup. But surprise… It’s only available on Windows (forgive me IBM I’m using linux).

Now I will try with nginx reverse proxy.

3

Subject: Reverse proxy

Try nginx as reverse proxy

4

Subject: Suggestion

Did you try the new HTTP server which comes with IBM Domino 9?
See http://xpagetips.blogspot.com/2013/05/setting-up-ibm-http-server-with-domino-9.html http://xpagetips.blogspot.com/2013/05/setting-up-ibm-http-server-with-domino-9.html and http://xpagetips.blogspot.com/2013/05/setting-up-tls-ssl-for-ibm-http-server_30.html http://xpagetips.blogspot.com/2013/05/setting-up-tls-ssl-for-ibm-http-server_30.html

5

Subject: SHA2 works but TLS for Windows and Unix use tips

SHA2 works but TLS for Windows and Unix use tips

I guess in the context of Poodle TLS not SHA-2 is critical, but anyway here is how to get SHA-2 working with Domino 9 without IBM HTTP.

http://www.infoware.com/?p=1592 http://www.infoware.com/?p=1592
TLS is NOT SOLVED by this only SHA-2.
For Windows use IHS integration For unix look at this link Darren Duke Blog Zone http://blog.darrenduke.net/darren/ddbz.nsf/dx/here-is-a-freely-available-vm-to-reverse-proxy-domino-shoot-the-poodle.htm
Regards
Mats