Hey,
Just one note - dovecot is an example of a server which creates a
self-signed server cert in the %post scriptlet of its package.
It at least allows people to run the server without doing anything.
Anyone who wants a CA signed server cert can install one later.
Cheers,
Mark.