I’m experience an issue with trying to use a SSL certificate for one of our domains served by a Domino server. I get the following error;
HTTP Server: SSL Error: No local certificate, key ring file [keyringfilename.kyr], IP address [xxx.xxx.xxx.xxx]
History. The certificate was originally installed on the server, then the server was rebuilt and the servername is now different (the Windows 2003 server name, all Domino has remained the same). It is the only SSL certificate for the Domino server, but IIS is running on the same server and using a SSL using a different IP address.
Does anyone have any suggestions on where I should look next, or does it appear I’ll have to revoke/renew the certificate?
Make sure the keyfile and the stash file, by default named keyfile.kyr and keyfile.sth, exist in the Domino data directory or the directory you specified when setting up SSL.
The error can also occurred when the case of the keyfile and stash file extensions do not match. Ex. changing the upper-case extension of keyfile.KYR to match the lowercase keyfile.sth, the server will load the keyfile and certificate without error.
Another cause of this error is the *.kyr or *.sth file having file permissions that do not allow the Domino server access to them. Change the permissions to avoid the error.
This error can also occur because the CA certificate is not properly merged into the keyring. Create a new certificate request, and merged the returned certificate into the keyring to resolve the error.
File corruption is also a possibility. To correct the error in this case, you (admin) will need to stopped the HTTP task (tell http quit), restored a backup keyfile.kyr and keyfile.sth from the last known day that SSL was working, then started HTTP (load http).