2.1.7 Encryption

These options control TLS/SSL encryption in imap4d and pop3d daemons.

--ssl-cert file

This option specifies the file name of the server side SSL certificate (accepts PEM format).

--ssl-key file

This option specifies the file name of the server side private SSL key (accepts PEM format). The key must be protected with 0600 file permissions (u=rw,g=,o=), otherwise imap4d or pop3d daemons will refuse to support TLS/SSL encryption.

--ssl-cafile file

This option specifies a file containing the list of trusted CAs (PEM list) in order to verify client's certificates. This option is not required.