mkpop3dcert − create a test SSL certificate for POP3 over SSL
@sbindir@/mkpop3dcert |
POP3 over SSL requires a valid, signed, X.509 certificate. The default location for the certificate file is @datadir@/pop3d.pem. mkpop3dcert generates a self−signed X.509 certificate, mainly for testing. For production use the X.509 certificate must be signed by a recognized certificate authority, in order for mail clients to accept the certificate.
@datadir@/pop3d.pem must be owned by the @mailuser@ user and have no group or world permissions. The mkpop3dcert command will enforce this. To prevent an unfortunate accident, mkpop3dcert will not work if @datadir@/pop3d.pem already exists.
mkpop3dcert requires OpenSSL to be installed.
@datadir@/pop3d.pem
X.509 certificate.
@sysconfdir@/pop3d.cnf
Parameters used by OpenSSL to create the X.509 certificate.
courier(8) [1]
Sam Varshavchik
Author
1. |
courier(8) |
http://www.courier-mta.org/courier.html