diff -p -up jabberd-2.2.8/etc/c2s.xml.dist.in.pem jabberd-2.2.8/etc/c2s.xml.dist.in
--- jabberd-2.2.8/etc/c2s.xml.dist.in.pem	2009-05-28 18:42:18.000000000 +0200
+++ jabberd-2.2.8/etc/c2s.xml.dist.in	2009-05-28 18:47:04.000000000 +0200
@@ -27,7 +27,7 @@
          If this is commented out, or the file can't be read, no attempt
          will be made to establish an encrypted channel with the router. -->
     <!--
-    <pemfile>@sysconfdir@/server.pem</pemfile>
+    <pemfile>/etc/jabberd/server.pem</pemfile>
     -->
 
     <!-- Router connection retry -->
@@ -125,7 +125,7 @@
     <id register-enable='true'>localhost.localdomain</id>
     <!-- or
     <id realm='company.int'
-        pemfile='@sysconfdir@/server.pem'
+        pemfile=/etc/jabberd/server.pem'
         verify-mode='7'
         require-starttls='true'
         register-enable='true'
@@ -164,7 +164,7 @@
          use STARTTLS over the standard XMPP port 5222 then you
          MUST specify the pemfile in the 'id' tag above. -->
     <!--
-    <pemfile>@sysconfdir@/server.pem</pemfile>
+    <pemfile>/etc/jabberd/server.pem</pemfile>
     -->
 
     <!-- SSL verify mode - see SSL_CTX_set_verify(3), mode parameter -->
diff -p -up jabberd-2.2.8/etc/router.xml.dist.in.pem jabberd-2.2.8/etc/router.xml.dist.in
--- jabberd-2.2.8/etc/router.xml.dist.in.pem	2009-05-28 18:42:18.000000000 +0200
+++ jabberd-2.2.8/etc/router.xml.dist.in	2009-05-28 18:56:09.000000000 +0200
@@ -52,7 +52,7 @@
          If this is commented out, connecting components will not be able
          to request an SSL-encrypted channel. -->
     <!--
-    <pemfile>@sysconfdir@/server.pem</pemfile>
+    <pemfile>/etc/jabberd/server.pem</pemfile>
     -->
   </local>
 
diff -p -up jabberd-2.2.8/etc/s2s.xml.dist.in.pem jabberd-2.2.8/etc/s2s.xml.dist.in
--- jabberd-2.2.8/etc/s2s.xml.dist.in.pem	2009-05-28 18:42:18.000000000 +0200
+++ jabberd-2.2.8/etc/s2s.xml.dist.in	2009-05-28 18:53:19.000000000 +0200
@@ -37,7 +37,7 @@
          If this is commented out, or the file can't be read, no attempt
          will be made to establish an encrypted channel with the router. -->
     <!--
-    <pemfile>@sysconfdir@/server.pem</pemfile>
+    <pemfile>/etc/jabberd/server.pem</pemfile>
     -->
 
     <!-- Router connection retry -->
@@ -106,7 +106,7 @@
          If this is commented out, or the file can't be read, no attempt will be
          made to establish encrypted connections with other servers. -->
     <!--
-    <pemfile>@sysconfdir@/server.pem</pemfile>
+    <pemfile>/etc/jabberd/server.pem</pemfile>
     -->
 
     <!-- SSL verify mode - see SSL_CTX_set_verify(3), mode parameter -->
@@ -117,7 +117,7 @@
     <!-- File containing an optional SSL certificate chain file for SSL
          connections. -->
     <!--
-    <cachain>@sysconfdir@/cachain.pem</cachain>
+    <cachain>/etc/jabberd/cachain.pem</cachain>
     -->
 
   </local>
diff -p -up jabberd-2.2.8/etc/sm.xml.dist.in.pem jabberd-2.2.8/etc/sm.xml.dist.in
--- jabberd-2.2.8/etc/sm.xml.dist.in.pem	2009-05-28 18:42:18.000000000 +0200
+++ jabberd-2.2.8/etc/sm.xml.dist.in	2009-05-28 18:54:09.000000000 +0200
@@ -29,7 +29,7 @@
          If this is commented out, or the file can't be read, no attempt
          will be made to establish an encrypted channel with the router. -->
     <!--
-    <pemfile>@sysconfdir@/server.pem</pemfile>
+    <pemfile>/etc/jabberd/server.pem</pemfile>
     -->
 
     <!-- Router connection retry -->