Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

I see different locations to store self-signed SSL certificates for Apache.

Which one should be used in which case?

  1. /etc/ssl/certs/ (pem file) + /etc/ssl/private/ (for key file)
  2. /etc/apache2/ssl/
share|improve this question
1  
They can be anywhere you like. /my/secret/porn/folder/just/kidding will work. Just make sure they're locked down so other users on the server can't read them. – ceejayoz Feb 23 '12 at 18:10
@ceejayoz, that really is the answer, you should probably add it as one, so I can up-vote it. – Zoredache Feb 23 '12 at 18:13

1 Answer

up vote 4 down vote accepted

They can be anywhere you like. /my/secret/porn/folder/just/kidding will work. Just make sure they're locked down so other users on the server can't read them.

I personally prefer the /etc/ssl/certs and /etc/ssl/keys approach, as I might switch to nginx or something - SSL certs aren't tied to a particular piece of server software. I've also seen them placed in the site's folder (i.e. /srv/domain.com/ssl), which can be nice organizationally.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.