How to create and update IBM Domino Keyring
Create new keyring
C:\Program Files (x86)\HCL\Notes>kyrtool.exe create -k "C:\Program Files (x86)\HCL\Notes\keyring.kyr" -p password
Keyfile C:\Program Files (x86)\HCL\Notes\keyring.kyr created successfully
Merge key and pem certificate to server.txt
C:\Program Files (x86)\HCL\Notes>type mykey.key my.pem>server.txt
mykey.key
my.pem
Verify the certificate
C:\Program Files (x86)\HCL\Notes>kyrtool.exe verify "C:\Program Files (x86)\HCL\Notes\server.txt"
KyrTool v1.1
Successfully read 2048 bit RSA private key
INFO: Successfully read 2 certificates
ERROR: Private key does not match leaf certificate
ERROR: IssuerName of cert 0 does NOT match the SubjectName of cert 1
WARNING: Final certificate in chain is not self-signed
Import the certificate to keyring
C:\Program Files (x86)\HCL\Notes>kyrtool import all -k "C:\Users\myuser\OneDrive - Office 365 Original\Documents\mykeyring.kyr" -i "C:\Program Files (x86)\HCL\Notes\server.txt"
Using keyring path 'C:\Users\myuser\OneDrive - Office 365 Original\Documents\mykeyring.kyr'
Successfully read 2048 bit RSA private key
SECIssUpdateKeyringPrivateKey succeeded
SECIssUpdateKeyringLeafCert succeeded
C:\Program Files (x86)\HCL\Notes>
Finish, if you want to update ssl on existing keyring, here the command
Update old keyring with new ssl certificate
C:\Program Files (x86)\HCL\Notes>kyrtool import all -k "C:\Users\myuser\OneDrive - Office 365 Original\Documents\myold.kyr" -i "C:\Program Files (x86)\HCL\Notes\server2.txt"
Using keyring path 'C:\Users\myuser\OneDrive - Office 365 Original\Documents\myold.kyr'
Successfully read 2048 bit RSA private key
SECIssUpdateKeyringPrivateKey succeeded
SECIssUpdateKeyringLeafCert succeeded
C:\Program Files (x86)\HCL\Notes>
Tidak ada komentar :
Posting Komentar