$ tar zxvf mod_tsunami-3.0.tar.gz
$ cd mod_tsunami-3.0/
$ /usr/local/apache/bin/apxs -c mod_tsunami.c
gcc -DLINUX=22 -I/usr/include/db1 -DUSE_HSREGEX -fpic -DSHARED_MODULE -I/usr/local/apache/include -c mod_tsunami.c
gcc -shared -o mod_tsunami.so mod_tsunami.o
# /usr/local/apache/bin/apxs -i -a -n 'tsunami' mod_tsunami.so
[activating module `tsunami' in /usr/local/apache/conf/httpd.conf]
cp mod_tsunami.so /usr/local/apache/libexec/mod_tsunami.so
chmod 755 /usr/local/apache/libexec/mod_tsunami.so
cp /usr/local/apache/conf/httpd.conf /usr/local/apache/conf/httpd.conf.bak
cp /usr/local/apache/conf/httpd.conf.new /usr/local/apache/conf/httpd.conf
rm /usr/local/apache/conf/httpd.conf.new

cbe2443539d5289ffb5ae2a036e0ba3d ucspi-tcp-ssl-20050405.patch.gz

$ cd /usr/local/src/
$ wget http://www.nrg4u.com/qmail/ucspi-tcp-ssl-20050405.patch.gz
$ gzip -d ucspi-tcp-ssl-20050405.patch.gz
$ cd ucspi-tcp-0.88
$ patch -p0 < ../ucspi-tcp-ssl-20050405.patch
patching file FILES
patching file Makefile
patching file TARGETS
patching file addcr.1
patching file argv0.1
patching file date@.1
patching file delcr.1
patching file error.h
patching file finger@.1
patching file fixcrio.1
patching file hier.c
patching file http@.1
patching file mconnect.1
patching file recordio.1
patching file tcp-environ.5
patching file tcpcat.1
patching file tcpclient.1
patching file tcprules.1
patching file tcprules.c
patching file tcprulescheck.1
patching file tcprulescheck.c
patching file tcpserver.1
patching file tcpserver.c
patching file who@.1
$ patch -p1 < ../ucspi-tcp-0.88.a_record.patch
patching file rblsmtpd.c
$ patch -p1 < ../ucspi-tcp-0.88.nobase.patch
patching file rblsmtpd.c
Hunk #2 succeeded at 228 (offset 38 lines).

$ make
$ su
# make setup check
./install
./instcheck

$ make
$ su
# cp tcpserver /usr/local/bin/tcpserver-ssl

# make cert
openssl req -new -x509 -nodes \
-out cert.pem -days 366 \
-keyout cert.pem
Using configuration from /usr/share/ssl/openssl.cnf
Generating a 1024 bit RSA private key
..++++++
..............++++++
writing new private key to 'cert.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [GB]: JP
State or Province Name (full name) [Berkshire]: Tokyo
Locality Name (eg, city) [Newbury]: Chiyoda
Organization Name (eg, company) [My Company Ltd]: example.com ← 企業名・団体名・ドメイン名など
Organizational Unit Name (eg, section) []:
Common Name (eg, your name or your server's hostname) []: mail.example.com ← 応答ホスト名
Email Address []: postmaster@example.com ← 管理者メールアドレス

# mkdir /var/qmail/server.key
# cp cert.pem /var/qmail/server.key/
# chmod 700 /var/qmail/server.key/; chmod 600 /var/qmail/server.key/cert.pem
# rm cert.pem

# vi /etc/rc.d/init.d/qmaild
--- (一部抜粋) ---
# port 110 POP3
/usr/local/bin/tcpserver -R -l mail.example.com 0 pop3

# port 995 POP3-SSL
/usr/local/bin/tcpserver-ssl -sR -l mail.example.com -n /var/qmail/server.key/cert.pem 0 pop3s

# /etc/rc.d/init.d/qmail stop
# /etc/rc.d/init.d/qmail start
# netstat -an | grep 995

# cd /var/qmail/server.key/
# openssl x509 -in cert.pem -outform DER -out cert.der

# openssl x509 -noout -fingerprint -sha1 -inform der -in cert.der
SHA1 Fingerprint=48:E8:6B:35:52:F0:97:30:AB:43:3D:E4:57:9B:64:42:83:58:85:D8