On Wed, 2005-03-09 at 13:40 -0500, John Peacock wrote:

The sample dovecot-example.conf contains these lines:

...

PEM encoded X.509 SSL/TLS certificate and private key. They're opened before

dropping root privileges, so keep the key file unreadable by anyone but

root. Included doc/mkcert.sh can be used to easily generate self-signed

certificate, just make sure to update the domains in dovecot-openssl.cnf

#ssl_cert_file = /etc/ssl/certs/dovecot.pem #ssl_key_file = /etc/ssl/private/dovecot.pem

but the aforementioned doc/mkcert.sh contains these lines:

...

CERTFILE=$SSLDIR/certs/imapd.pem KEYFILE=$SSLDIR/private/imapd.pem

either the script should be changed to reflect the sample config file or vice versa.

With 1.0-tests the mkcert.sh was already changed to create dovecot.pems. I updated my 0.99.14 source tree now too, but I don't know if I'm ever going to release 0.99.15.