<?xml version="1.0"?> <html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><title>mkimapdcert</title><link rel="stylesheet" href="style.css" type="text/css"/><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"/><link rel="home" href="#id556215" title="mkimapdcert"/><link xmlns="" rel="stylesheet" type="text/css" href="manpage.css"/><meta xmlns="" name="MSSmartTagsPreventParsing" content="TRUE"/><link xmlns="" rel="icon" href="icon.gif" type="image/gif"/><!-- Copyright 1998 - 2009 Double Precision, Inc. See COPYING for distribution information. --></head><body><div class="refentry" title="mkimapdcert"><a id="id556215" shape="rect"> </a><div class="titlepage"/><div class="refnamediv"><h2>Name</h2><p>mkimapdcert — create a test SSL certificate for IMAP over SSL</p></div><div class="refsynopsisdiv" title="Synopsis"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="command">/usr/sbin/mkimapdcert</code> </p></div></div><div class="refsect1" title="DESCRIPTION"><a id="id555945" shape="rect"> </a><h2>DESCRIPTION</h2><p> IMAP over SSL requires a valid, signed, X.509 certificate. The default location for the certificate file is <code class="filename">/usr/share/courier-imap/imapd.pem</code>. <span class="command"><strong>mkimapdcert</strong></span> generates a self-signed X.509 certificate, mainly for testing. For production use the X.509 certificate must be signed by a recognized certificate authority, in order for mail clients to accept the certificate.</p><p> <code class="filename">/usr/share/courier-imap/imapd.pem</code> must be owned by the root user and have no group or world permissions. The <span class="command"><strong>mkimapdcert</strong></span> command will enforce this. To prevent an unfortunate accident, <span class="command"><strong>mkimapdcert</strong></span> will not work if <span class="command"><strong>/usr/share/courier-imap/imapd.pem</strong></span> already exists.</p><p> <span class="command"><strong>mkimapdcert</strong></span> requires <span class="application">OpenSSL</span> to be installed.</p></div><div class="refsect1" title="FILES"><a id="id556012" shape="rect"> </a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term">/usr/share/courier-imap/imapd.pem</span></dt><dd> X.509 certificate. </dd><dt><span class="term">/etc/courier/imapd.cnf</span></dt><dd> Parameters used by OpenSSL to create the X.509 certificate. </dd></dl></div></div><div class="refsect1" title="SEE ALSO"><a id="id590480" shape="rect"> </a><h2>SEE ALSO</h2><p> <a class="ulink" href="courier.html" target="_top" shape="rect"><span class="citerefentry"><span class="refentrytitle">courier</span>(8)</span></a></p></div></div></body></html>