IMAP over SSL requires a valid, signed, X.509 certificate. The default location for the certificate file is
/usr/lib/courier/imapd.pem.
mkimapdcert
generates a self-signed X.509 certificate, mainly for testing. For production use the X.509 certificate must be signed by a recognized certificate authority, in order for mail clients to accept the certificate.
/usr/lib/courier/imapd.pem
must be owned by the daemon user and have no group or world permissions. The
mkimapdcert
command will enforce this. To prevent an unfortunate accident,
mkimapdcert
will not work if
/usr/lib/courier/imapd.pem
already exists.
mkimapdcert
requires
OpenSSL
to be installed.
FILES
/usr/lib/courier/imapd.pem
-
X.509 certificate.
/etc/courier/imapd.cnf
-
Parameters used by OpenSSL to create the X.509 certificate.
SEE ALSO
m[blue]courier(8)m[][1]
NOTES
- 1.
-
courier(8)
-
[set $man.base.url.for.relative.links]/courier.html
Index
- NAME
-
- SYNOPSIS
-
- DESCRIPTION
-
- FILES
-
- SEE ALSO
-
- NOTES
-
This document was created by
man2html,
using the manual pages.
Time: 22:01:59 GMT, April 16, 2011