Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In the openssl.conf can I e.g. see

[ CA_default ]

dir             = $ENV::KEY_DIR         # Where everything is kept
certs           = $dir                  # Where the issued certs are kept
crl_dir         = $dir                  # Where the issued crl are kept
database        = $dir/index.txt        # database index file.
new_certs_dir   = $dir                  # default place for new certs.

If I set new_certs_dir to $dir/newcerts then when I create a new certificate then e.g. a file called 17.pam is placed there instead of in $dir.

What does openssl use these files for?

However if I set certs to e.g. $dir/certs and create the directory, I would have expected that new crt, csr, key files would be place there, but they are still put in $dir.

Does anyone know what certs is for?

share|improve this question
up vote 3 down vote accepted

The folder named "Certs" is used as a central point to store your *.pem files which are the Public Keys of a specific certificate;

Let me give you an example of how it works.

Lets say that you Open a new account on the EC2 Amazon Cluster, and you create a new box, you are asked to download the *.pem files, so you can authenticate that you are the user that enabled such box.

So, once you have the certificate, you can put it on your certs folder, and then, execute something like this.

ssh -i demo.pem

But be carefull, these certs must be under a certain user permission and a certain execution/configuration, because you would not want another users on the same box to use these files.

Another thing are the issued_certs folder, which in this case, that would be the folder where you keep all your certificates and their corresponding keys that have been created with openSSL.

share|improve this answer
I was under the impression that certs were the issued_certs folder, as new crt, csr, key are put there. Is there a way to have these created in e.g. $dir/issued_certs? – Sandra Feb 16 '12 at 18:06

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.