Index: freeradius-server-2.1.8/raddb/certs/Makefile
===================================================================
--- freeradius-server-2.1.8.orig/raddb/certs/Makefile	2010-03-09 16:00:11.000000000 +0100
+++ freeradius-server-2.1.8/raddb/certs/Makefile	2010-03-09 16:00:22.000000000 +0100
@@ -51,7 +51,7 @@ dh:
 #  Create a new self-signed CA certificate
 #
 ######################################################################
-ca.key ca.pem: ca.cnf
+ca.key ca.pem:
 	openssl req -new -x509 -keyout ca.key -out ca.pem \
 		-days $(CA_DEFAULT_DAYS) -config ./ca.cnf
 
@@ -63,7 +63,7 @@ ca.der: ca.pem
 #  Create a new server certificate, signed by the above CA.
 #
 ######################################################################
-server.csr server.key: server.cnf
+server.csr server.key:
 	openssl req -new  -out server.csr -keyout server.key -config ./server.cnf
 
 server.crt: server.csr ca.key ca.pem index.txt serial
@@ -85,7 +85,7 @@ server.vrfy: ca.pem
 #  certificate.
 #
 ######################################################################
-client.csr client.key: client.cnf
+client.csr client.key:
 	openssl req -new  -out client.csr -keyout client.key -config ./client.cnf
 
 client.crt: client.csr ca.pem ca.key index.txt serial
Index: freeradius-server-2.1.8/raddb/certs/bootstrap
===================================================================
--- freeradius-server-2.1.8.orig/raddb/certs/bootstrap	2010-03-09 16:00:11.000000000 +0100
+++ freeradius-server-2.1.8/raddb/certs/bootstrap	2010-03-09 16:00:22.000000000 +0100
@@ -19,6 +19,7 @@ make all
 #
 if [ "$?" = "0" ]
 then
+  chgrp radiusd *
   exit 0
 fi
 
@@ -44,3 +45,4 @@ openssl ca -batch -keyfile ca.key -cert
 openssl pkcs12 -export -in server.crt -inkey server.key -out server.p12  -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` || exit 1
 openssl pkcs12 -in server.p12 -out server.pem -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` || exit 1
 openssl x509 -inform PEM -outform DER -in ca.pem -out ca.der || exit 1
+chgrp radiusd *