Create a custom imapd.pem SSL certificate for Westhost IMAP

This trick will let you get rid of the annoying Thunderbird dialog questioning you about the SSL certificate every time it checks for new mail. In the imap directory which holds the imap certificates (see this WH forum post), /usr/local/imap-server-1.0/openssl-0.9.8d/certs, execute this command:
../bin/openssl req -new -x509 -nodes -out imapd.pem -keyout imapd.pem
which I found here during a google search. openssl will prompt your for a number of parameters; however, the reason I had to do this, and the most important part of the certificate generation is the Common Name (CN). The CN is the name that you set up in your IMAP client (such as Thunderbird) as your IMAP server. I use a sub-domain for my IMAP server (, but the Westhost manager website does not allow me to select that Common Name, it automatically selects as the CN.

Leave a Reply