.\"  <!-- $Id: mkpop3dcert.sgml,v 1.1 2001/12/01 20:32:35 mrsam Exp $ -->
.\"  <!-- Copyright 2000 - 2001 Double Precision, Inc.  See COPYING for -->
.\"  <!-- distribution information. -->
.\" This manpage has been automatically generated by docbook2man 
.\" from a DocBook document.  This tool can be found at:
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/> 
.\" Please send any bug reports, improvements, comments, patches, 
.\" etc. to Steve Cheng <steve@ggi-project.org>.
.TH "MKPOP3DCERT" "8" "19 February 2004" "Double Precision, Inc." ""

.SH NAME
mkpop3dcert \- create a test SSL certificate for POP3 over SSL
.SH SYNOPSIS

\fB/usr/lib/courier-imap/sbin/mkpop3dcert\fR

.SH "DESCRIPTION"
.PP
POP3 over SSL requires a valid, signed, X.509 certificate.  The default
location for the certificate file is
\fI/usr/lib/courier-imap/share/pop3d.pem\fR\&.
\fBmkpop3dcert\fR generates a self-signed X.509 certificate,
mainly for
testing.
For production use the X.509 certificate must be signed by a
recognized certificate authority, in order for mail clients to accept the
certificate.
.PP
\fI/usr/lib/courier-imap/share/pop3d.pem\fR must be owned by the
root user and
have no group or world permissions.
The \fBmkpop3dcert\fR command will
enforce this.  To prevent an unfortunate accident,
\fBmkpop3dcert\fR
will not work if \fB/usr/lib/courier-imap/share/pop3d.pem\fR already exists.
.PP
\fBmkpop3dcert\fR requires
\fBOpenSSL\fR to be installed.
.SH "FILES"
.TP
\fB/usr/lib/courier-imap/share/pop3d.pem\fR
X.509 certificate.
.TP
\fB/usr/lib/courier-imap/etc/pop3d.cnf\fR
Parameters used by OpenSSL to
create the X.509 certificate.
.SH "SEE ALSO"
.PP
\fBcourier\fR(8)