I see different locations to store self-signed SSL certificates for Apache.
Which one should be used in which case?
- /etc/ssl/certs/ (pem file) + /etc/ssl/private/ (for key file)
They can be anywhere you like.
/my/secret/porn/folder/just/kidding will work. Just make sure they're locked down so other users on the server can't read them.
I personally prefer the
/etc/ssl/keys approach, as I might switch to nginx or something - SSL certs aren't tied to a particular piece of server software. I've also seen them placed in the site's folder (i.e.
/srv/domain.com/ssl), which can be nice organizationally.