 +
 +PROCD_ADDRESS = $(RUN)/procd_pipe
 +
++# Account for different pki locations for Debian
++AUTH_SSL_SERVER_CAFILE   = /etc/ssl/certs/ca-bundle.crt
++AUTH_SSL_CLIENT_CAFILE   = /etc/ssl/certs/ca-bundle.crt
++AUTH_SSL_SERVER_CERTFILE = /etc/ssl/certs/localhost.crt
++AUTH_SSL_SERVER_KEYFILE  = /etc/ssl/private/localhost.key
++
 +##  Install the minihtcondor package to run HTCondor on a single node

diff --git condor_config.generic condor_config.generic
index f329950..56db3f1 100644
--- condor_config.generic
+++ condor_config.generic
@@ -19,25 +19,23 @@
 ######################################################################
 

 #LOCAL_CONFIG_DIR_EXCLUDE_REGEXP = ^((\..*)|(.*~)|(#.*)|(.*\.rpmsave)|(.*\.rpmnew))$
 
 ##  Use a host-based security policy. By default CONDOR_HOST and the local machine will be allowed
@@ -50,5 +48,36 @@
 #FLOCK_TO = condor.cs.wisc.edu, cm.example.edu
 
 ##--------------------------------------------------------------------
