There was a brief thread on this at the end of last year; obviously
"certificate management" is a problem of vast scope but it would be good
to sort out at least some simple filesystem conventions for FC4. Some
simple problems I'd like to solve:
1. certificate storage is split between /etc/httpd/conf/ssl.*
for mod_ssl-specific stuff, and and /usr/share/ssl for system-wide
2. ... and /usr/share/ssl is Very Wrong for "config data" like certs
3. increasing number of daemon packages are creating self-signed
certs in %post scripts; could/should this be unified?
Any comments?
joe
Show replies by date