Put the certificates to the /etc/pki as suggested by: http://fedoraproject.org/wiki/PackagingDrafts/Certificates Nessus2 package in Fedora is using the same. diff -ru openvas-scanner-3.2.2/CMakeLists.txt openvas-scanner-3.2.2.new/CMakeLists.txt --- openvas-scanner-3.2.2/CMakeLists.txt 2011-02-21 10:40:34.000000000 +0100 +++ openvas-scanner-3.2.2.new/CMakeLists.txt 2011-03-18 23:07:04.000000000 +0100 @@ -152,16 +152,17 @@ set (OPENVAS_CACHE_DIR "${LOCALSTATEDIR}/cache/openvas") set (OPENVAS_PID_DIR "${LOCALSTATEDIR}/run") set (OPENVAS_SYSCONF_DIR "${SYSCONFDIR}/openvas") +set (OPENVAS_CERT_DIR "${SYSCONFDIR}/pki/openvas") set (OPENVAS_USERS_DIR "${OPENVAS_STATE_DIR}/users") set (OPENVAS_NVT_DIR "${OPENVAS_STATE_DIR}/plugins") set (OPENVAS_LIB_INSTALL_DIR "${LIBDIR}") -set (OPENVAS_SCANNER_CERTIFICATE "${OPENVAS_STATE_DIR}/CA/servercert.pem") -set (OPENVAS_SCANNER_KEY "${OPENVAS_STATE_DIR}/private/CA/serverkey.pem") -set (OPENVAS_CLIENT_CERTIFICATE "${OPENVAS_STATE_DIR}/CA/clientcert.pem") -set (OPENVAS_CLIENT_KEY "${OPENVAS_STATE_DIR}/private/CA/clientkey.pem") -set (OPENVAS_CA_CERTIFICATE "${OPENVAS_STATE_DIR}/CA/cacert.pem") +set (OPENVAS_SCANNER_CERTIFICATE "${OPENVAS_CERT_DIR}/CA/servercert.pem") +set (OPENVAS_SCANNER_KEY "${OPENVAS_CERT_DIR}/private/CA/serverkey.pem") +set (OPENVAS_CLIENT_CERTIFICATE "${OPENVAS_CERT_DIR}/CA/clientcert.pem") +set (OPENVAS_CLIENT_KEY "${OPENVAS_CERT_DIR}/private/CA/clientkey.pem") +set (OPENVAS_CA_CERTIFICATE "${OPENVAS_CERT_DIR}/CA/cacert.pem") set (OPENVASSD_MESSAGES "${OPENVAS_LOG_DIR}/openvassd.messages") set (OPENVASSD_DEBUGMSG "${OPENVAS_LOG_DIR}/openvassd.dump") diff -ru openvas-scanner-3.2.2/tools/openvas-mkcert-client.in openvas-scanner-3.2.2.new/tools/openvas-mkcert-client.in --- openvas-scanner-3.2.2/tools/openvas-mkcert-client.in 2011-02-21 10:40:34.000000000 +0100 +++ openvas-scanner-3.2.2.new/tools/openvas-mkcert-client.in 2011-03-18 23:09:22.000000000 +0100 @@ -26,8 +26,8 @@ umask 022 -OPENVASPRIV="@OPENVAS_STATE_DIR@/private/CA" -OPENVASPUB="@OPENVAS_STATE_DIR@/CA" +OPENVASPRIV="@OPENVAS_CERT_DIR@/private/CA" +OPENVASPUB="@OPENVAS_CERT_DIR@/CA" usage() { diff -ru openvas-scanner-3.2.2/tools/openvas-mkcert.in openvas-scanner-3.2.2.new/tools/openvas-mkcert.in --- openvas-scanner-3.2.2/tools/openvas-mkcert.in 2011-02-21 10:40:34.000000000 +0100 +++ openvas-scanner-3.2.2.new/tools/openvas-mkcert.in 2011-03-18 23:11:40.000000000 +0100 @@ -44,8 +44,8 @@ datadir=@DATADIR@ bindir=@BINDIR@ sbindir=@SBINDIR@ -OPENVASPRIV="@OPENVAS_STATE_DIR@/private/CA" -OPENVASPUB="@OPENVAS_STATE_DIR@/CA" +OPENVASPRIV="@OPENVAS_CERT_DIR@/private/CA" +OPENVASPUB="@OPENVAS_CERT_DIR@/CA" BASEDIR=${TMPDIR-/tmp}/openvas-mkcert.$$