3.1.7 Encryption

These options control TLS/SSL encryption in imap4d and pop3d daemons.

`--ssl-cert file'

This option specifies the file name of the server side SSL certificate (accepts PEM format).

`--ssl-key file'

This option specifies the file name of the server side private SSL key (accepts PEM format). The key must be protected with 0600 file permissions (u=rw,g=,o=), otherwise imap4d or pop3d daemons will refuse to support TLS/SSL encryption.

`--ssl-cafile file'

This option specifies a file containing the list of trusted CAs (PEM list) in order to verify client's certificates. This option is not required.