@@ -, +, @@ 
---
 instfiles/xrdp.service.in | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)
--- a/instfiles/xrdp.service.in	
+++ a/instfiles/xrdp.service.in	
@@ -8,7 +8,11 @@ After=network.target xrdp-sesman.service
 Type=forking
 PIDFile=@localstatedir@/run/xrdp.pid
 EnvironmentFile=-@sysconfdir@/sysconfig/xrdp
-EnvironmentFile=-@sysconfdir@/default/xrdp
+#EnvironmentFile=-@sysconfdir@/default/xrdp
+# (re)generate certificates
+ExecStartPre=/usr/bin/cert-sh generate xrdp
+# generate keys
+ExecStartPre=/bin/sh -e -c 'if [ ! -f /etc/xrdp/rsakeys.ini ]; then xrdp-keygen xrdp /etc/xrdp/rsakeys.ini; chmod 0600 /etc/xrdp/rsakeys.ini; fi'
 ExecStart=@sbindir@/xrdp $XRDP_OPTIONS
 ExecStop=@sbindir@/xrdp $XRDP_OPTIONS --kill
 
--