<?xml version="1.0"?>
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><title>mkpop3dcert</title><link rel="stylesheet" href="style.css" type="text/css"/><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"/><link rel="home" href="#id558912" title="mkpop3dcert"/><link xmlns="" rel="stylesheet" type="text/css" href="manpage.css"/><meta xmlns="" name="MSSmartTagsPreventParsing" content="TRUE"/><link xmlns="" rel="icon" href="icon.gif" type="image/gif"/><!--

Copyright 1998 - 2009 Double Precision, Inc.  See COPYING for distribution
information.

--></head><body><div class="refentry" title="mkpop3dcert"><a id="id558912" shape="rect"> </a><div class="titlepage"/><div class="refnamediv"><h2>Name</h2><p>mkpop3dcert — create a test SSL certificate for POP3 over SSL</p></div><div class="refsynopsisdiv" title="Synopsis"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="command">@sbindir@/mkpop3dcert</code> </p></div></div><div class="refsect1" title="DESCRIPTION"><a id="id558641" shape="rect"> </a><h2>DESCRIPTION</h2><p>
POP3 over SSL requires a valid, signed, X.509 certificate.  The default
location for the certificate file is
<code class="filename">@datadir@/pop3d.pem</code>.
<span class="command"><strong>mkpop3dcert</strong></span> generates a self-signed X.509 certificate,
mainly for
testing.
For production use the X.509 certificate must be signed by a
recognized certificate authority, in order for mail clients to accept the
certificate.</p><p>
<code class="filename">@datadir@/pop3d.pem</code> must be owned by the
@mailuser@ user and
have no group or world permissions.
The <span class="command"><strong>mkpop3dcert</strong></span> command will
enforce this.  To prevent an unfortunate accident,
<span class="command"><strong>mkpop3dcert</strong></span>
will not work if <span class="command"><strong>@datadir@/pop3d.pem</strong></span> already exists.</p><p>
<span class="command"><strong>mkpop3dcert</strong></span> requires
<span class="application">OpenSSL</span> to be installed.</p></div><div class="refsect1" title="FILES"><a id="id558708" shape="rect"> </a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term">@datadir@/pop3d.pem</span></dt><dd>
X.509 certificate.
</dd><dt><span class="term">@sysconfdir@/pop3d.cnf</span></dt><dd>
Parameters used by OpenSSL to
create the X.509 certificate.
</dd></dl></div></div><div class="refsect1" title="SEE ALSO"><a id="id593177" shape="rect"> </a><h2>SEE ALSO</h2><p>
<a class="ulink" href="courier.html" target="_top" shape="rect"><span class="citerefentry"><span class="refentrytitle">courier</span>(8)</span></a></p></div></div></body></html>
