dovecot - Jul 2013 - trying to configre dovecot

Hi all;

Thinking I'd like to have a bit of security, I followed the example for 
dovecot from allgoodthings.org

Guessing between the lines I made a few substitutions to localize it for 
me, but when I run the line to dump the configs, the output is very short 
because I do not have the *.pem files.

Where can a usable set of these ssl 'keyfiles' be obtained?

Cheers, Gene
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
My web page: <http://coyoteden.dyndns-free.com:85/gene> is up!
My views 
<http://www.armchairpatriot.com/What%20Has%20America%20Become.shtml>
Gee, I feel kind of LIGHT in the head now, knowing I can't make my
satellite dish PAYMENTS!
A pen in the hand of this president is far more
dangerous than 200 million guns in the hands of
         law-abiding citizens.

On 7/14/2013 9:03 PM, Gene Heskett wrote:
> Hi all;
> 
> Thinking I'd like to have a bit of security, I followed the example for
> dovecot from allgoodthings.org
> 
> Guessing between the lines I made a few substitutions to localize it for 
> me, but when I run the line to dump the configs, the output is very short 
> because I do not have the *.pem files.
> 
> Where can a usable set of these ssl 'keyfiles' be obtained?

$ openssl genrsa -out server.key 2048
$ openssl req -sha256 -new -key server.key -out server.csr
$ openssl x509 -req -days 3650 -in server.csr -signkey server.key -out
server.crt
$ cat server.key server.crt > server.pem

Run the four commands.  You will have a key file, certificate signing
request file, a self signed cert and a pem file which is the
concatenation of the key and cert (some systems need this, and some are
ok with the key and cert being separate).  This is everything you will
need to get the server working with SSL or TLS.

The third command generates a self signed certificate.  If you are
playing around or this is for internal / personal use, this is ok, but
if you want real security, you need to have your cert signed by a real
certificate authority (CA).

If you are going to do this, the way you answer the questions in step
two is important.  You should do some research into the requirements of
your chosen CA, but for example, the question about the state usually
must be answered with the full state name, properly capitalized, and not
an abbreviation.  Example: "Florida" is correct, "FL" is
not.

If any doubts, contact your CA first before generating your csr.

Dem