MKIMAPDCERT(8)              Double Precision, Inc.              MKIMAPDCERT(8)



NAME
       mkimapdcert - create a test SSL certificate for IMAP over SSL

SYNOPSIS
       /usr/local/sbin/mkimapdcert

DESCRIPTION
       IMAP over SSL requires a valid, signed, X.509 certificate. The default
       location for the certificate file is /etc/ssl/private/imapd.pem.
       mkimapdcert generates a self-signed X.509 certificate, mainly for
       testing. For production use the X.509 certificate must be signed by a
       recognized certificate authority, in order for mail clients to accept
       the certificate.

       /etc/ssl/private/imapd.pem must be owned by the _courier user and have
       no group or world permissions. The mkimapdcert command will enforce
       this. To prevent an unfortunate accident, mkimapdcert will not work if
       /etc/ssl/private/imapd.pem already exists.

       mkimapdcert requires OpenSSL to be installed.

FILES
       /etc/ssl/private/imapd.pem
           X.509 certificate.

       /etc/courier/imapd.cnf
           Parameters used by OpenSSL to create the X.509 certificate.

SEE ALSO
       courier(8)[1]

AUTHOR
       Sam Varshavchik
           Author

NOTES
        1. courier(8)
           [set $man.base.url.for.relative.links]/courier.html



Courier Mail Server               04/04/2011                    MKIMAPDCERT(8)
