SSL

Insert the following into your ssl.conf and continue creating the keys:

SSLCertificateFile /etc/mail/certs/newcert.pem
SSLCertificateKeyFile /etc/mail/certs/req.pem
SSLCertificateChainFile /etc/mail/certs/cacert.pem

New certificate

To create a certificate do the following:

Generate the CA key:

cd /etc/mail/certs/
edit CA.pl and set days to high value like 10-20 years
maybe edit /etc/ssl/openssl.cnf
CA.pl -newca
cp demoCA/cacert.pem .

Generate keypair:

edit CA.pl again and set it to 1-2 years
CA.pl -newreq
as COMMON NAME put FQDN

Sign the keypair:

CA.pl -sign

Remove the password from keypair:

openssl rsa -in newkey.pem -out req.pem
#rm newreq.pem
chmod 0600 *

To add you self created CA to the chain of trust you must import the file cacert.pem on all computers and select trust completely.

Sign the keypair:

cd /etc/mail/certs
/usr/local/ssl/CA.pl -sign