I am migrating a server I inherited; it has a signed certificate.
The server is a "LERP"-stack (Linux Nginx Rails Passenger). The previous maintainer stored the certificates under /etc/nginx/
; I doubt this is the convential place to store them, in Ubuntu or Debian.
But where should I store them? I have:
example.com.crt
example.com.csr
example.com.key
SSL123_CA_Bundle.pem
nginx, running as www-data, needs read-access to these files.
I currently not running a mailserver or proxy server, but I would assume a the "preferred place" to store the certificates on a Debian or Ubuntu server would be somewhere where Dovecot or Squid and such, have access to the certs too; if they are implemented.