--- src/Makefile.in
+++ src/Makefile.in
@@ -276,8 +276,10 @@
 
 # Additional preprocesor definitions
 stunnel_CPPFLAGS = -I$(SSLDIR)/include \
-	-DLIBDIR='"$(pkglibdir)"' -DCONFDIR='"$(sysconfdir)/stunnel"' \
-	-DPIDFILE='"$(localstatedir)/run/stunnel/stunnel.pid"'
+	-DLIBDIR='"$(pkglibdir)"' -DCONFDIR='"/mod/etc"' \
+	-DPIDFILE='"/var/run/stunnel.pid"' \
+	-DFREETZ_DEFAULT_CERT='"/tmp/flash/stunnel/certs.pem"' \
+	-DFREETZ_DEFAULT_KEY='"/tmp/flash/stunnel/key.pem"'
 
 # Win32 executable
 EXTRA_DIST = make.bat makece.bat makew32.bat mingw.mak evc.mak vc.mak \
--- src/options.c
+++ src/options.c
@@ -786,7 +786,7 @@
     /* cert */
     switch(cmd) {
     case CMD_BEGIN:
-        section->cert=NULL;
+        section->cert=FREETZ_DEFAULT_CERT;
         break;
     case CMD_EXEC:
         if(strcasecmp(opt, "cert"))
@@ -800,7 +800,8 @@
     case CMD_FREE:
         break;
     case CMD_DEFAULT:
-        break; /* no default certificate */
+        s_log(LOG_NOTICE, "%-22s = %s", "cert", FREETZ_DEFAULT_CERT);
+        break;
     case CMD_HELP:
         s_log(LOG_NOTICE, "%-22s = certificate chain", "cert");
         break;
@@ -1144,7 +1145,7 @@
     /* key */
     switch(cmd) {
     case CMD_BEGIN:
-        section->key=NULL;
+        section->key=FREETZ_DEFAULT_KEY;
         break;
     case CMD_EXEC:
         if(strcasecmp(opt, "key"))
@@ -1156,6 +1157,7 @@
     case CMD_FREE:
         break;
     case CMD_DEFAULT:
+        s_log(LOG_NOTICE, "%-22s = %s", "key", FREETZ_DEFAULT_KEY);
         break;
     case CMD_HELP:
         s_log(LOG_NOTICE, "%-22s = certificate private key", "key");