/usr/local/bin/exim-gencert

vai

# TLS certificate (Exim4 built with TLS is required for this.)
#
# Generate a self-signed certificate using the following (openssl):
#
# openssl req -x509 -newkey rsa:1024 -keyout \
# config/tls_certificate_private.pem -out config/tls_certificate_public.pem \
# -days 9999 -nodes
#
# openssl dhparam -out config/tls_dhparam.pem 1024
#
tls_certificate = CONFIGDIR/config/tls_certificate_public.pem
tls_privatekey = CONFIGDIR/config/tls_certificate_private.pem
tls_dhparam = CONFIGDIR/config/tls_dhparam.pem

atkarībā no exim4 konfigurācijas.