if in_depends $MODULE openssl ; then
  if query "Create a new SSL key? " y ; then
    mkdir -p -m665 /etc/mail/certs
    chown root:mail /etc/mail/certs
    chmod 660 /etc/mail/certs
    /usr/bin/openssl req -new -nodes -out req.pem -keyout /etc/mail/certs/cert.pem
    chmod 600 /etc/mail/certs/cert.pem
    chown root:0 /etc/mail/certs/cert.pem 
    /usr/bin/openssl genrsa -des3 -out /etc/mail/certs/ca.key 1024   
    /usr/bin/openssl req -new -x509 -days 365 -key /etc/mail/certs/ca.key -out /etc/mail/certs/ca.crt
    /usr/bin/openssl x509 -req -CA /etc/mail/certs/ca.crt -CAkey /etc/mail/certs/ca.key -days 365 -in req.pem -out /etc/mail/certs/signed-req.pem -CAcreateserial
    cat /etc/mail/certs/signed-req.pem >> /etc/mail/certs/cert.pem 
    cat > /etc/config.d/qpopper.conf <<EOF
set tls-support = stls
set tls-server-cert-file = /etc/mail/certs/cert.pem
EOF
  fi
fi
true
