OpenSSL and certificates
Information on certificate generation for CAcert.org signing.
- Follow instructions on CAcert.org page.
 - That's enough for getting simple signed certificate which is good for exim. For Courier IMAP additionally you will require to perform the following steps.
 - Create a random file: 
dd if=/dev/urandom of=/tmp/cert.rand count=1 - Create PEM formated certificate: 
cat private.key server.crt > server.pem - Generate DH pair for certificate: 
openssl gendh -rand /tmp/cert.rand 512 >>./server.pem - Clean-up: 
rm -f /tmp/cert.rand