SSL certificate management/storage

[Joe Orton]

There was a brief thread on this at the end of last year; obviously
"certificate management" is a problem of vast scope but it would be good
to sort out at least some simple filesystem conventions for FC4.  Some
simple problems I'd like to solve:

1. certificate storage is split between /etc/httpd/conf/ssl.*
for mod_ssl-specific stuff, and and /usr/share/ssl for system-wide
2. ... and /usr/share/ssl is Very Wrong for "config data" like certs
3. increasing number of daemon packages are creating self-signed
certs in %post scripts; could/should this be unified?

Any comments?

joe