openssl req -new -nodes -out req.pem -keyout key.pem  
openssl rsa -in key.pem -out new.key.pem
openssl x509 -in req.pem -out ca-cert -req -signkey new.key.pem -days 999 
mkdir /var/lib/imap
mv new.key.pem /var/lib/imap/server.pem
cat ca-cert >> /var/lib/imap/server.pem
chown cyrus:mail /var/imap/server.pem
chmod 600 /var/lib/imap/server.pem
echo tls_ca_file: /var/lib/imap/server.pem >> /etc/imapd.conf
echo tls_cert_file: /var/lib/imap/server.pem >> /etc/imapd.conf
echo tls_key_file: /var/lib/imap/server.pem >> /etc/imapd.conf