<?xml version="1.0"?>
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><title>mkpop3dcert</title><link rel="stylesheet" type="text/css" href="style.css"/><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot"/><link rel="home" href="#mkpop3dcert" title="mkpop3dcert"/><link xmlns="" rel="stylesheet" type="text/css" href="manpage.css"/><meta xmlns="" name="MSSmartTagsPreventParsing" content="TRUE"/><link xmlns="" rel="icon" href="icon.gif" type="image/gif"/><!--

Copyright 1998 - 2009 S. Varshavchik.  See COPYING for distribution
information.

--></head><body><div class="refentry"><a id="mkpop3dcert" shape="rect"> </a><div class="titlepage"/><div class="refnamediv"><h2>Name</h2><p>mkpop3dcert — create a test SSL certificate for POP3 over SSL</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="command">@sbindir@/mkpop3dcert</code> </p></div></div><div class="refsect1"><a id="mkpop3dcert_description" shape="rect"> </a><h2>DESCRIPTION</h2><p>
POP3 over SSL requires a valid, signed, X.509 certificate.  The default
location for the certificate file is
<code class="filename">@datadir@/pop3d.pem</code>.
<span class="command"><strong>mkpop3dcert</strong></span> generates a self-signed X.509 certificate,
mainly for
testing.
For production use the X.509 certificate must be signed by a
recognized certificate authority, in order for mail clients to accept the
certificate.</p><p>
<code class="filename">@datadir@/pop3d.pem</code> must be owned by the
@mailuser@ user and
have no group or world permissions.
The <span class="command"><strong>mkpop3dcert</strong></span> command will
enforce this.  To prevent an unfortunate accident,
<span class="command"><strong>mkpop3dcert</strong></span>
will not work if <span class="command"><strong>@datadir@/pop3d.pem</strong></span> already exists.</p><p>
<span class="command"><strong>mkpop3dcert</strong></span> requires
<span class="application">OpenSSL</span> to be installed.</p></div><div class="refsect1"><a id="mkpop3dcert_files" shape="rect"> </a><h2>FILES</h2><div class="variablelist"><dl class="variablelist"><dt><span class="term">@datadir@/pop3d.pem</span></dt><dd>
X.509 certificate.
</dd><dt><span class="term">@sysconfdir@/pop3d.cnf</span></dt><dd>
Parameters used by OpenSSL to
create the X.509 certificate.
</dd></dl></div></div><div class="refsect1"><a id="mkpop3dcert_see_also" shape="rect"> </a><h2>SEE ALSO</h2><p>
<a class="ulink" href="courier.html" target="_top" shape="rect"><span class="citerefentry"><span class="refentrytitle">courier</span>(8)</span></a></p></div></div></body></html>
