Certificate Location
 

Do people have any opinions on where to place X509 certificate and key files?

I have a system with a number of servers needing ssl support, and I am just wondering what the pros and cons are for putting everything in a central directory like /etc/ssl, or is it better to spread them around the various configuration directories, like /etc/postfix, /etc/apache2 and so on.

Opinions?

It's really a matter of preference. I tend to put
cert files in the config directory of the service,
since that is where I will look if I'm troubleshooting
a service.