adopt a fairly widely used convention for ssl file locations