Re: /etc/pki

[Thierry Sayegh De Bellis <linux glossolalie org>]

Richard W.M. Jones wrote:
> Is there a Fedora standard for what goes in /etc/pki?
> 
> Or to put it another way, if I were writing an application and I put its
> PKI files in /etc/pki/<myappname>/... would that be OK?
> 
> Particular files that the application needs to store:
> 
> * self-generated CA certificate and associated files such as revocation
> list, issued certs, CA's private key
> * list of client certs of clients allowed to access (on server)
> * machine's own private key and certificate (client & server)
> 
> Rich.
> 
SSL-related keys are now in /etc/pki as far as RHEL5 is concerned so my
guess is your approach is quite reasonable

hth
Thierry

-- 
(o<    Thierry Sayegh De Bellis, RHCE
//\    http://glossolalie.com
V_/_   Fingerprint: 9976 11FE D9C6 8C67 6242 7BB1 6466 3F1D 56ED 7D5A