Add instructions on adding imaps to cyrus.conf.

Create your own CA (from http://www.sendmail.org/~ca/email/other/cagreg.html):

mkdir /wherever/CA
cd /wherever/CA
mkdir certs crl newcerts private
echo "01" >serial
cp /dev/null index.txt
cp /etc/ssl/openssl.cnf .
vi openssl.conf (set values - set dir to ./)
openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem -days 1825 -config \
./openssl.cnf

Make a new certificate:
cd /wherever/CA
openssl req -nodes -new -x509 -keyout newreq.pem -out \
newreq.pem -days 1825 -config ./openssl.cnf

(certificate and private key in file newreq.pem)

Sign new cert with certificate authority:

cd /wherever/CA
openssl x509 -x509toreq -in newreq.pem -signkey newreq.pem -out tmp.pem
openssl ca -config ./openssl.cnf -policy policy_anything -out newcert.pem -infiles tmp.pem
rm tmp.pem

newcert.pem contains signed cert, newreq.pem contains unsigned cert and private key.

Copy to proper locations:
Copy to sendmail locations:
cp cacert.pem /etc/mail/certs
cp newcert.pem /etc/mail/certs/mycert.pem
cp newreq.pem /etc/mail/certs/mykey.pem
chmod 600 /etc/mail/certs/*.pem

Edit /etc/mail/sendmail.cf to match, as well as /etc/cyrus.conf