Path to TLS certificates

[Russ Allbery]

Julien ÉLIE <julien at trigofacile.com> writes:

> I see that TLS certificates are generated into <pathlib>:
> @libdir@/cert.pem and @libdir@/key.pem
>
> Is there a reason for that?

Not that I can remember.

> Wouldn't it be better to put them elsewhere?
> For instance in <pathetc>, as it is done in the Debian package?

Yeah, pathetc would make more sense.  (The Debian package should really
use /etc/ssl/certs and /etc/ssl/private, but unfortunately not every OS
has such a nice system for managing certificates.)

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>

    Please send questions to the list rather than mailing me directly.
     <http://www.eyrie.org/~eagle/faqs/questions.html> explains why.