location of server certificates

[email protected]
Newsgroups gmane.linux.debian.devel.apache
Message-ID <[email protected]>
Hello all

I have an Apache webserver and I want to enable it to serve contents
over https. In order to understand the entire workflow of certificate
management and how https works I have created my own CA. Essentially
I have generated a self signed certificate for my CA and installed
in my browser as a truested CA. Next I have generated a certificate for
the server and signed it with the private key of the CA.

Now I am ready to install the server certificate on the machine where
Apache runs.

Here is my question: Where will the certificate be placed in the filesystem?
Is there any recomended location?

The information I can find on the internet about this issue is not
convincing. Let me explain why:

   - some people mention /etc/ssl/certs as the appropriate location

     Isn't this folder used for Trusted CAs instead of server
     certificates? Another objection about this location: isn't this
     location managed by update-ca-certificates?

   - some pages tell you to create a folder "localcerts" under
     /etc/ssl/

     Why create it here? The entire /etc/ssl/ is managed by the os sofware.
     Why should I interfere with the OS software?

   - other pages do not specify any prefered location (e.g. the Apache
     documentation)

   - other pages say to no store the certificate inside the Apache configuration
     folder /etc/apache2  because the certificate is not something which is
     related to Apache. This advice seems right, because some day I can replace
     Apache with another server. But where to place it?

Thank you
Cristian
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.