diff -Nur --no-dereference e-smith-radiusd-2.6.0.old/createlinks e-smith-radiusd-2.6.0/createlinks
--- e-smith-radiusd-2.6.0.old/createlinks	2021-05-31 00:02:03.557000000 -0400
+++ e-smith-radiusd-2.6.0/createlinks	2021-05-31 00:08:47.922000000 -0400
@@ -71,6 +71,7 @@
 	user-lock
 	user-modify
 	user-modify-admin
+	
             ) )
 {
     safe_symlink("sigterm", "root/etc/e-smith/events/$event/services2adjust/radiusd");
@@ -82,6 +83,9 @@
 event_link("systemd-reload", $event, "89");
 event_link("systemd-default", $event, "88");
 
+templates2events("/etc/raddb/certs/radiusd.pem", qw( bootstrap-console-save ssl-update e-smith-radiusd-update) );
+safe_symlink("restart", "root/etc/e-smith/events/ssl-update/services2adjust/radiusd");
+
 # activate modules
 #safe_symlink("../mods-available/realm", "root/etc/raddb/mods-enabled/realm");
 safe_symlink("../mods-available/ldap", "root/etc/raddb/mods-enabled/ldap");
diff -Nur --no-dereference e-smith-radiusd-2.6.0.old/root/etc/e-smith/templates.metadata/etc/raddb/certs/radiusd.pem e-smith-radiusd-2.6.0/root/etc/e-smith/templates.metadata/etc/raddb/certs/radiusd.pem
--- e-smith-radiusd-2.6.0.old/root/etc/e-smith/templates.metadata/etc/raddb/certs/radiusd.pem	1969-12-31 19:00:00.000000000 -0500
+++ e-smith-radiusd-2.6.0/root/etc/e-smith/templates.metadata/etc/raddb/certs/radiusd.pem	2021-05-31 00:03:48.456000000 -0400
@@ -0,0 +1,4 @@
+TEMPLATE_PATH="/home/e-smith/ssl.pem"
+OUTPUT_FILENAME="/etc/raddb/certs/radiusd.pem"
+GID="radiusd"
+PERMS=0640
diff -Nur --no-dereference e-smith-radiusd-2.6.0.old/root/sbin/e-smith/systemd/radiusd-certificate e-smith-radiusd-2.6.0/root/sbin/e-smith/systemd/radiusd-certificate
--- e-smith-radiusd-2.6.0.old/root/sbin/e-smith/systemd/radiusd-certificate	2021-05-31 00:02:03.558000000 -0400
+++ e-smith-radiusd-2.6.0/root/sbin/e-smith/systemd/radiusd-certificate	1969-12-31 19:00:00.000000000 -0500
@@ -1,40 +0,0 @@
-#!/usr/bin/perl -w
-
-#----------------------------------------------------------------------
-# copyright (C) 2005 Mitel Networks Corporation
-# 
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#               
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#               
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307  USA
-# 
-# Technical support for this program is available from Mitel Networks 
-# Please visit our web site www.mitel.com/sme/ for details.
-#----------------------------------------------------------------------
-
-use esmith::tcpsvd;
-use esmith::ConfigDB;
-use File::Copy;
-
-my $c = esmith::ConfigDB->open_ro;
-my $s = $c->get('SystemName')->value;
-my $d = $c->get('DomainName')->value;
-
-my $pem = "/etc/raddb/certs/radiusd.pem";
-# Now copy system pem file into jail used by stunnel/sslio
-copy("/home/e-smith/ssl.pem/$s.$d.pem", "$pem.$$")
-  or die "failed to copy SSL PEM: $!";
-chmod 0640, "$pem.$$";
-esmith::util::chownFile("root", "radiusd", "$pem.$$");
-rename("$pem.$$", "$pem")
-  or die "failed to rename $pem.$$ to $pem: $!";
-
diff -Nur --no-dereference e-smith-radiusd-2.6.0.old/root/usr/lib/systemd/system/radiusd.service.d/50-koozali.conf e-smith-radiusd-2.6.0/root/usr/lib/systemd/system/radiusd.service.d/50-koozali.conf
--- e-smith-radiusd-2.6.0.old/root/usr/lib/systemd/system/radiusd.service.d/50-koozali.conf	2021-05-31 00:02:03.566000000 -0400
+++ e-smith-radiusd-2.6.0/root/usr/lib/systemd/system/radiusd.service.d/50-koozali.conf	2021-05-31 00:09:43.323000000 -0400
@@ -5,7 +5,7 @@
 ExecStartPre=
 ExecStartPre=/sbin/e-smith/service-status radiusd
 ExecStartPre=/sbin/e-smith/systemd/radiusd-configure
-ExecStartPre=/sbin/e-smith/systemd/radiusd-certificate
+ExecStartPre=/sbin/e-smith/expand-template /etc/raddb/certs/radiusd.pem
 ExecStartPre=-/bin/chown -R radiusd.radiusd /var/run/radiusd
 ExecStartPre=/usr/sbin/radiusd -C
 Restart=always