OpenSSL

Generate Key

Encrypted

openssl genrsa -des3 -out domainname.key 1024

Unencrypted

openssl genrsa -out domainname.key 1024

Generate CSR

openssl req -new -key domainname.key -out domainname.csr

Application Specific Notes

Courier IMAP

Courier IMAP requires the certificate and the key be contained within the same pem file like so:

-----BEGIN CERTIFICATE-----
[encoded data]
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
[encoded data]
-----END RSA PRIVATE KEY-----