[2024-feb-29] Sad news: Eric Layton aka Nocturnal Slacker aka vtel57 passed away on Feb 26th, shortly after hospitalization. He was one of our Wiki's most prominent admins. He will be missed.

Welcome to the Slackware Documentation Project

This is an old revision of the document!


Configuring SSL Certificates

This article is under construction and not complete! Please return later…

We will now create and install a self-signed SSL certificate to support secure email.

You may want to replace these with a CA-signed certificate if that better suits your needs.

The dovecot package installs a script for generating self-signed certs at /usr/doc/dovecot-2.2.13/mkcert.sh, which you may use if you prefer. The following commands do the same thing but to a different path.

The following commands will generate a certificate good for one year. You may adjust the value after -days to make the certificate valid for a different period of time. We will use the paths used here in later steps, so please note if you change them.

mkdir -p /etc/ssl/localcerts

openssl req -new -x509 -sha256 -days 365 -nodes -out /etc/ssl/localcerts/dove.pem -keyout /etc/ssl/private/dove.key

chmod 600 /etc/ssl/localcerts/dove.pem
chmod 600 /etc/ssl/private/dove.key

Return to main article page

 howtos:network_services:postfix_dovecot_mysql:ssl ()