MKIMAPDCERT(8) Double Precision, Inc. MKIMAPDCERT(8)NAME
mkimapdcert - create a test SSL certificate for IMAP over SSL
SYNOPSIS
/usr/sbin/mkimapdcert
DESCRIPTION
IMAP over SSL requires a valid, signed, X.509 certificate. The default location for the certificate file is /usr/lib/courier/imapd.pem.
mkimapdcert generates a self-signed X.509 certificate, mainly for testing. For production use the X.509 certificate must be signed by a
recognized certificate authority, in order for mail clients to accept the certificate.
/usr/lib/courier/imapd.pem must be owned by the daemon user and have no group or world permissions. The mkimapdcert command will enforce
this. To prevent an unfortunate accident, mkimapdcert will not work if /usr/lib/courier/imapd.pem already exists.
mkimapdcert requires OpenSSL to be installed.
FILES
/usr/lib/courier/imapd.pem
X.509 certificate.
/etc/courier/imapd.cnf
Parameters used by OpenSSL to create the X.509 certificate.
SEE ALSO courier(8)[1]
AUTHOR
Sam Varshavchik
Author
NOTES
1. courier(8)
[set $man.base.url.for.relative.links]/courier.html
Courier Mail Server 04/04/2011 MKIMAPDCERT(8)
Check Out this Related Man Page
x509(3) OpenSSL x509(3)NAME
x509 - X.509 certificate handling
SYNOPSIS
#include <openssl/x509.h>
DESCRIPTION
A X.509 certificate is a structured grouping of information about an individual, a device, or anything one can imagine. A X.509 CRL
(certificate revocation list) is a tool to help determine if a certificate is still valid. The exact definition of those can be found in
the X.509 document from ITU-T, or in RFC3280 from PKIX. In OpenSSL, the type X509 is used to express such a certificate, and the type
X509_CRL is used to express a CRL.
A related structure is a certificate request, defined in PKCS#10 from RSA Security, Inc, also reflected in RFC2896. In OpenSSL, the type
X509_REQ is used to express such a certificate request.
To handle some complex parts of a certificate, there are the types X509_NAME (to express a certificate name), X509_ATTRIBUTE (to express a
certificate attributes), X509_EXTENSION (to express a certificate extension) and a few more.
Finally, there's the supertype X509_INFO, which can contain a CRL, a certificate and a corresponding private key.
X509_..., d2i_X509_... and i2d_X509_... handle X.509 certificates, with some exceptions, shown below.
X509_CRL_..., d2i_X509_CRL_... and i2d_X509_CRL_... handle X.509 CRLs.
X509_REQ_..., d2i_X509_REQ_... and i2d_X509_REQ_... handle PKCS#10 certificate requests.
X509_NAME_... handle certificate names.
X509_ATTRIBUTE_... handle certificate attributes.
X509_EXTENSION_... handle certificate extensions.
SEE ALSO X509_NAME_ENTRY_get_object(3), X509_NAME_add_entry_by_txt(3), X509_NAME_add_entry_by_NID(3), X509_NAME_print_ex(3), X509_NAME_new(3),
d2i_X509(3), d2i_X509_ALGOR(3), d2i_X509_CRL(3), d2i_X509_NAME(3), d2i_X509_REQ(3), d2i_X509_SIG(3), crypto(3), x509v3(3)1.0.0 2003-07-10 x509(3)
Man Page
15 More Discussions You Might Find Interesting
1. Post Here to Contact Site Administrators and Moderators
Hi,
My box is freeBSD6 and I've installed courier-imap and I want to authenticate the clients against /etc/passwd file.
Inside the configuration file: /usr/local/etc/courier-imap/pop3d I've not these lines : Why?
AUTHMODULES="authdaemon"
AUTHMODULES_ORIG="authdaemon"
Nevertheless I tried... (5 Replies)
Hi peeps,
I want to learn how to configure mail servers, I am in private network, I am running debian 4.0, practically I have tried courier-mta, courier-imap, postfix, and sendmail.
sometimes I am able to send mail and not able to connect to my imap server which is localhost, sometimes I am... (1 Reply)
Hi, I have done a very stupid thing. I have migrated from Courier IMAP and POP to Dovecot without reading about the migration process. ( I resolve not to repeat it again).
Now it has been 2 weeks. Webmail seems to work fine. I have problems with POP3.
POP3 clients don't remove messages from the... (2 Replies)
Guys,
could you tell me how to create an imap gmail ssl certificate?
in my .fetchmailrc file I have
poll imap.gmail.com protocol IMAP user "xxxxx@gmail.com" there with password "xxxx" nofetchall keep ssl
but I'm getting an error
fetchmail: Server certificate verification error:... (13 Replies)
HI,
I want to know the certificate expiry dates and who is owner of the certificate installed in UNIX.
example certiface name
1)SSL
2)Veri Sign Trust Network (1 Reply)
Hello everybody
Hope somebody can help me
I'm trying to install SSL Certificate on Apache/mod_ssl on Linux with Zend for Oracle.
I bought and downloaded certificate from certificate from Network Solutions. Than I followed the instructions to the dot.
I created a directory for certificate... (2 Replies)
Dear All
Anyone know how to issue two different certification on apache virtualhost fyi i have one virtualhost eg 69.192.1.25:443 already signed with verisign how can i configure another virtualhost 69.192.1.25:443 which signing with another certificate which self signing. i search net not... (1 Reply)
Ok, so this may be an unusual request. But I have a certificate that expires sometime in may of 2011. Now, i have to monitor this certificate and alert when the current time is within 30 days of may 20, 2011.
#!/usr/bin/perl
#
use Time::Local;
#
$sec=59;
$min=59;
$hours=23;
$day=31;... (3 Replies)
I am trying to do what I thought should be a simple substitution, but I can't get it to work.
File:
Desire output:
I thought I'd start with a sed command to remove the part of the header line preceding the string "comp", then go on to remove the suffix of the target string (e.g. ":3-509(-)"),... (3 Replies)
We have a RHEL 5.8 server at the production level and we have a Java application on this server. I know of the SSL certificate generation at the OS (RHEL) level but it is implemented on the Java application by our development team using the Java keytool. My doubt is that is the SSL generation can... (3 Replies)
Hi I'm trying to create a basic script that pauses for user input to verify a file name before generating the output.
I have numerous SSL certificate files which I am trying to determine the expiry date so what I'm trying to do is write a script so that is pauses to request the name of the .pem... (9 Replies)
Need assistance . I have a cvs file which i changed to html file but when i try to send mail to outlook its indent goes wrong. any idea is appreciated .
below are some commands i tried using
Converting csv to html
#!/bin/sh
nawk 'BEGIN{
FS=","
print "MIME-Version: 1.0"
print ... (7 Replies)
Hi everyone,
I am working on a Nginx + Apache installation for learning purposes, and just got to the point of installing a self-signed certificate for securing some pages that will be used to send "sensitive" information such as login credentials. So far so good.
What a I want to know is how can... (2 Replies)
Anyone have any procedures or tutorials on how to change the self-signed certificate on the IBM AIX VIOS Intergrated Virtulization Manager web site?
I've googled till my fingers broke and most links take me to generic replacements for IBM products that I don't have.
Any help is appreciated.... (3 Replies)