Certificate Location

kayben · 02-21-2008, 12:07 PM

Do people have any opinions on where to place X509 certificate and key files?

I have a system with a number of servers needing ssl support, and I am just wondering what the pros and cons are for putting everything in a central directory like /etc/ssl, or is it better to spread them around the various configuration directories, like /etc/postfix, /etc/apache2 and so on.

Opinions?

carltm · 02-23-2008, 06:59 AM

It's really a matter of preference. I tend to put
cert files in the config directory of the service,
since that is where I will look if I'm troubleshooting
a service.