<?xml version="1.0"?>
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><title>mkimapdcert</title><link rel="stylesheet" href="style.css" type="text/css"/><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"/><link rel="home" href="#id320900" title="mkimapdcert"/><link xmlns="" rel="stylesheet" type="text/css" href="manpage.css"/><meta xmlns="" name="MSSmartTagsPreventParsing" content="TRUE"/><link xmlns="" rel="icon" href="icon.gif" type="image/gif"/><!--

Copyright 1998 - 2009 Double Precision, Inc.  See COPYING for distribution
information.

--></head><body><div class="refentry" title="mkimapdcert"><a id="id320900" shape="rect"> </a><div class="titlepage"/><div class="refnamediv"><h2>Name</h2><p>mkimapdcert — create a test SSL certificate for IMAP over SSL</p></div><div class="refsynopsisdiv" title="Synopsis"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="command">@sbindir@/mkimapdcert</code> </p></div></div><div class="refsect1" title="DESCRIPTION"><a id="id320629" shape="rect"> </a><h2>DESCRIPTION</h2><p>
IMAP over SSL requires a valid, signed, X.509 certificate.  The default
location for the certificate file is
<code class="filename">@certsdir@/imapd.pem</code>.
<span class="command"><strong>mkimapdcert</strong></span> generates a self-signed X.509 certificate,
mainly for
testing.
For production use the X.509 certificate must be signed by a
recognized certificate authority, in order for mail clients to accept the
certificate.</p><p>
<code class="filename">@certsdir@/imapd.pem</code> must be owned by the
@mailuser@ user and
have no group or world permissions.
The <span class="command"><strong>mkimapdcert</strong></span> command will
enforce this.  To prevent an unfortunate accident,
<span class="command"><strong>mkimapdcert</strong></span>
will not work if <span class="command"><strong>@certsdir@/imapd.pem</strong></span> already exists.</p><p>
<span class="command"><strong>mkimapdcert</strong></span> requires
<span class="application">OpenSSL</span> to be installed.</p></div><div class="refsect1" title="FILES"><a id="id320697" shape="rect"> </a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term">@certsdir@/imapd.pem</span></dt><dd>
X.509 certificate.
</dd><dt><span class="term">@sysconfdir@/imapd.cnf</span></dt><dd>
Parameters used by OpenSSL to
create the X.509 certificate.
</dd></dl></div></div><div class="refsect1" title="SEE ALSO"><a id="id355165" shape="rect"> </a><h2>SEE ALSO</h2><p>
<a class="ulink" href="courier.html" target="_top" shape="rect"><span class="citerefentry"><span class="refentrytitle">courier</span>(8)</span></a></p></div></div></body></html>
