SSL Certificate Location on UNIX/Linux

Question

Is there any standard or convention for where SSL certificates and associated private keys should go on the UNIX/Linux filesystem?

Thanks.

Answer 1

For system wide use OpenSSL should provide you /etc/ssl/certs and /etc/ssl/private. The latter of which will be restricted 700 to root:root.

If you have an application not performing an initial privsep from root then it might suit you to locate them somewhere local to the application with the relevantly restricted ownership and permissions.