Thawte, keyring and SSL

HCL Domino Domino Forum
1

hi,

the question: how to configure domino to work as https server with non self-certified certificates?

  1. I installed the thawte certificate (*.crt) into the keyring (keyring.kyr) in the certsrv.nsf

  2. there is no *.kyr file on the hd, there is no possibility to export the keyring from the db.

  3. in the server document ssl is enabled

  4. the db which I want to access via http is set to use ssl

  5. when I try to access the db the browser shows an empty page, the http-log db says: 302 found (the data requested has a different url temporarily).

the same db without ssl works fine.

that am I doing wrong?

thank you,

robert

2

Subject: Thawte, keyring and SSL

If you have created a keyring in the database, there should be a .kyr and a .sth file created. They may be in your Notes client data directory, but you can easily copy them to the servers data directory.

From the Notes Admin Help topic ‘Creating a server key ring file’:

  1. Click "Create Key Ring." 

  2. After you read the information about the key ring file and distinguished name, click OK. Notes creates the key ring file and stash (.STH) file and places them in the Notes data directory on the client machine used to create the key ring.

  3. Copy the key ring file and stash (.STH) file to the Domino data directory on the server.

Hope this helps