I have a private SSL key on my VPS that's used by several applications (Apache, Postfix, etc). The problem is, I can't exactly set the permissions to 0600 (
-rw-------) because these various applications run as different users (www-data, vmail, etc). Oddly enough, Apache is somehow able to read it, but Postfix was bombing out whenever I'd try to send mail through SSL port 465, and I found out it's because of permissions on the key.
Is there a security convention on how to handle this? Do I just make duplicate copies of this SSL key and put it in different places, chowning it to each user/group that needs to use it?