Re: server certificates/key pairs and CA directories

2015-08-03 Thread Kurt Roeckx
On Tue, Jul 21, 2015 at 04:50:42PM +, Thorsten Glaser wrote: Daniel Pocock daniel at pocock.pro writes: I looked at the package ssl-cert to try and understand and there I found that it is using /etc/ssl/certs for server certs while other packages Do NOT do that. It's causing

Re: server certificates/key pairs and CA directories

2015-08-02 Thread Daniel Pocock
On 21/07/15 18:50, Thorsten Glaser wrote: Daniel Pocock daniel at pocock.pro writes: I looked at the package ssl-cert to try and understand and there I found that it is using /etc/ssl/certs for server certs while other packages Do NOT do that. I wasn't suggesting that was desirable,

Re: server certificates/key pairs and CA directories

2015-08-02 Thread Paul Wise
On Sun, Aug 2, 2015 at 4:50 PM, Daniel Pocock wrote: Does anybody know which packages create or use the /etc/ssl/ssl.* That looks like a sysadmin created path, only one package even mentions it: https://codesearch.debian.net/search?q=/etc/ssl/ssl -- bye, pabs

Re: server certificates/key pairs and CA directories

2015-08-02 Thread Daniel Pocock
On 2 August 2015 11:25:35 CEST, Paul Wise p...@debian.org wrote: On Sun, Aug 2, 2015 at 4:50 PM, Daniel Pocock wrote: Does anybody know which packages create or use the /etc/ssl/ssl.* That looks like a sysadmin created path, only one package even mentions it:

Re: server certificates/key pairs and CA directories

2015-08-02 Thread Antti Järvinen
Daniel Pocock writes: Looking through various Debian boxes, I can't help noticing a range of directories under /etc/ssl, e.g. I have no idea if this has been discussed before but what it comes to private key storage, there is program named tpmtool (part of GnuTLS) that allows storing private

Re: server certificates/key pairs and CA directories

2015-07-21 Thread Thorsten Glaser
Daniel Pocock daniel at pocock.pro writes: I looked at the package ssl-cert to try and understand and there I found that it is using /etc/ssl/certs for server certs while other packages Do NOT do that. It’s causing trouble because some software (e.g. Gajim) reads all files under

server certificates/key pairs and CA directories

2015-07-03 Thread Daniel Pocock
Hi all, There has been some discussion in the past about CA certificates and server certificate/key locations in /etc I'd like to ensure that the RTC Quick Start Guide[1] is giving people accurate instructions about where to create their private key and server certificate files on a Debian