<?xml version="1.0"?> <html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><title>mkpop3dcert</title><link rel="stylesheet" href="style.css" type="text/css"/><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"/><link rel="home" href="#id289634" title="mkpop3dcert"/><link xmlns="" rel="stylesheet" type="text/css" href="manpage.css"/><meta xmlns="" name="MSSmartTagsPreventParsing" content="TRUE"/><link xmlns="" rel="icon" href="icon.gif" type="image/gif"/><!-- Copyright 1998 - 2009 Double Precision, Inc. See COPYING for distribution information. --></head><body><div class="refentry" title="mkpop3dcert"><a id="id289634" shape="rect"> </a><div class="titlepage"/><div class="refnamediv"><h2>Name</h2><p>mkpop3dcert — create a test SSL certificate for POP3 over SSL</p></div><div class="refsynopsisdiv" title="Synopsis"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="command">/usr/sbin/mkpop3dcert</code> </p></div></div><div class="refsect1" title="DESCRIPTION"><a id="id289363" shape="rect"> </a><h2>DESCRIPTION</h2><p> POP3 over SSL requires a valid, signed, X.509 certificate. The default location for the certificate file is <code class="filename">/usr/share/courier-imap/pop3d.pem</code>. <span class="command"><strong>mkpop3dcert</strong></span> generates a self-signed X.509 certificate, mainly for testing. For production use the X.509 certificate must be signed by a recognized certificate authority, in order for mail clients to accept the certificate.</p><p> <code class="filename">/usr/share/courier-imap/pop3d.pem</code> must be owned by the root user and have no group or world permissions. The <span class="command"><strong>mkpop3dcert</strong></span> command will enforce this. To prevent an unfortunate accident, <span class="command"><strong>mkpop3dcert</strong></span> will not work if <span class="command"><strong>/usr/share/courier-imap/pop3d.pem</strong></span> already exists.</p><p> <span class="command"><strong>mkpop3dcert</strong></span> requires <span class="application">OpenSSL</span> to be installed.</p></div><div class="refsect1" title="FILES"><a id="id289431" shape="rect"> </a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term">/usr/share/courier-imap/pop3d.pem</span></dt><dd> X.509 certificate. </dd><dt><span class="term">/etc/courier/pop3d.cnf</span></dt><dd> Parameters used by OpenSSL to create the X.509 certificate. </dd></dl></div></div><div class="refsect1" title="SEE ALSO"><a id="id323899" shape="rect"> </a><h2>SEE ALSO</h2><p> <a class="ulink" href="courier.html" target="_top" shape="rect"><span class="citerefentry"><span class="refentrytitle">courier</span>(8)</span></a></p></div></div></body></html>