{"id":7508,"date":"2013-09-10T08:45:00","date_gmt":"2013-09-10T06:45:00","guid":{"rendered":"http:\/\/nolabnoparty.com\/?p=7508"},"modified":"2013-09-10T08:57:16","modified_gmt":"2013-09-10T06:57:16","slug":"renew-ssl-certificate-lotus-domino-8-5","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/renew-ssl-certificate-lotus-domino-8-5\/","title":{"rendered":"Renew the SSL certificate in Lotus Domino 8.5"},"content":{"rendered":"

\"renewssl01\"<\/p>\n

When the certificate in Lotus Domino is close to expiration, you can use the existing key ring<\/strong> to renew the SSL certificate.<\/p>\n

The procedure consists in sending the certification request to the CA<\/strong> that will return the stamped SSL certificate.<\/p>\n

<\/p>\n

Select key ring<\/h2>\n

When you try accessing the Server Certification Administration<\/strong> page you may receive the following error message:<\/p>\n

Invalid or nonexistent document<\/p><\/blockquote>\n

\"renewssl02\"<\/p>\n

To avoid the \u201cInvalid or nonexistent document\u201d error message, open the Server Certificate Administration<\/strong> through the menu File > Application > Open<\/strong>.<\/p>\n

\"renewssl03\"<\/p>\n

Set the Look in<\/strong> field as DominoMail\/yourdomain<\/em><\/span>\/IT<\/strong>, select the Server Certificate Admin<\/strong><\/span> item then click Open<\/strong>.<\/p>\n

\"renewssl04\"<\/p>\n

The application should open now. Click View & Edit Key Rings<\/strong> option to access your own SSL certificate<\/strong>.<\/p>\n

\"renewssl05\"<\/p>\n

If not already set, click on Select Key Ring to Display<\/strong> in order to work with current active SSL certificate. Type the path and filename<\/strong> then click OK<\/strong>. As a best practice avoid working on the original file but consider to make a copy instead.<\/p>\n

\"renewssl06\"<\/p>\n

Enter the password<\/strong> to access the file then click OK<\/strong>. The password is stored in the file .sth<\/strong>.<\/p>\n

\"renewssl07\"<\/p>\n

The correct file<\/strong> is now set.<\/p>\n

\"renewssl08\"<\/p>\n

Click on Create Key Rings & Certificates<\/strong> option to access the page we need to create the new certificate.<\/p>\n

\"renewssl09\"<\/p>\n

 <\/p>\n

Create certificate request<\/h2>\n

First step is the creation of the certificate request to send to the Certification Authority. Click the Create Certificate Request<\/strong> option.<\/p>\n

 <\/p>\n

\"renewssl10\"<\/p>\n

Fill the requested fields then click on Create Certificate Request<\/strong>.<\/p>\n

\"renewssl11\"<\/p>\n

Enter the password<\/strong> to access the file then click OK<\/strong>.<\/p>\n

\"renewssl12\"<\/p>\n

Copy the certificate including the BEGINS and END lines<\/strong> to send to the CA.<\/p>\n

\"renewssl13\"<\/p>\n

Paste the copied certificate to the module request<\/strong> then wait the CA to return the signed certificate.<\/p>\n

\"renewssl14\"<\/p>\n

 <\/p>\n

Install trusted Root certificate<\/h2>\n

Once the CA returns the signed certificate, we need first to install the Authority Trusted Root certificate<\/strong>. From main page click Install Trusted Root Certificate into Key Ring<\/strong> option.<\/p>\n

\"renewssl15\"<\/p>\n

Fill requested fields and paste the CA Root certificate then click Merge Trusted Root Certificate into Key Ring<\/strong> button.<\/p>\n

\"renewssl16\"<\/p>\n

Enter the password<\/strong> to access the file then click OK<\/strong>.<\/p>\n

\"renewssl17\"<\/p>\n

When the summary Window appears click OK<\/strong> to proceed with merge.<\/p>\n

\"renewssl18\"<\/p>\n

The confirmation window appears. Repeat same step if any intermediate CA certificates<\/strong> are used by the Authority.<\/p>\n

\"renewssl19\"<\/p>\n

 <\/p>\n

Install the certificate<\/h2>\n

Once Trusted Root Certificate has been installed, we need to install the actual SSL certificate<\/strong> into Key Ring. Click Install Certificate Into Key Ring<\/strong> option.<\/p>\n

\"renewssl20\"<\/p>\n

Fill requested fields and paste the certificate received from CA then click Merge Certificate into Key Ring<\/strong> button.<\/p>\n

\"renewssl21\"<\/p>\n

Enter the password<\/strong> to access the file then click OK<\/strong>.<\/p>\n

\"renewssl22\"<\/p>\n

The confirmation Window appears showing the certificate info. Click OK<\/strong> to proceed with merge.<\/p>\n

\"renewssl23\"<\/p>\n

Click OK<\/strong> to proceed.<\/p>\n

\"renewssl24\"<\/p>\n

The certificate is now installed<\/strong> into Key Ring.<\/p>\n

\"renewssl25\"<\/p>\n

 <\/p>\n

Configure Domino SSL settings<\/h2>\n

From Domain Administrator<\/strong>, click Configuration > Server > All Server Documents > Ports > Internet Ports<\/strong>. Check that SSL key file name contains the correct path and filename<\/strong> then click Save & Close<\/strong> button.<\/p>\n

\"renewssl26\"<\/p>\n

Copy the updated Key Ring files<\/strong> (both *.kyr<\/strong> and *.sth<\/strong>) in Domino Data<\/strong> under\\Lotus\\Domino\\data<\/em> directory.<\/p>\n

\"renewssl27\"<\/p>\n

To activate new configuration, restart the http server<\/strong>.<\/p>\n

\"renewssl28\"<\/p>\n

 <\/p>\n

Check the SSL certificate<\/h4>\n

When you click from your browser the certificate details while accessing the webmail through https, you can check the new validation period of the SSL<\/strong> certificate.<\/p>\n

\"renewssl29\"<\/p>\n

The procedure is now complete<\/strong> and the system is now up-to-date with the new SSL certificate.<\/p>\n

\"firma\"<\/p>\n","protected":false},"excerpt":{"rendered":"

When the certificate in Lotus Domino is close to expiration, you can use the existing key ring to renew the SSL certificate. The procedure consists in sending the certification request to the CA that will return the stamped SSL certificate.<\/p>\n","protected":false},"author":3,"featured_media":7479,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"linkedin_93tdZWzMZc_93tdZWzMZc":"","facebook_2879994398731222_17841400390232720":"","twitter_113568041_113568041":"","mastodon_115463926174894442_115463926174894442":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[539,534],"tags":[682,600,601,680],"class_list":["post-7508","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lotus-domino-en","category-messaging-en","tag-certificate-en","tag-domino-en","tag-lotus-en","tag-ssl-en","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/7508","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=7508"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/7508\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/7479"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=7508"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=7508"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=7508"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}