CHANGE server certificate and key must be set in configure
diff --git a/config.h.in b/config.h.in
index b52353f..c35cb7a 100644
--- a/config.h.in
+++ b/config.h.in
@@ -15,6 +15,11 @@
 /** groupname for change of ownership of socket file */
 #define CHOWN_GROUP "@CHOWN_GROUP@"
 
+/** path to the notification server certificate */
+#define NOTIF_SERVER_CERT_PATH "@CERT_PATH@"
+
+/** path to the notification server private key */
+#define NOTIF_SERVER_PRIVKEY_PATH "@PRIVKEY_PATH@"
 
 #endif
 
diff --git a/configure.ac b/configure.ac
index 9ff4401..cd271f5 100644
--- a/configure.ac
+++ b/configure.ac
@@ -60,6 +60,20 @@
 CFLAGS="-Wall -Wextra $json_CFLAGS $netconf2_CFLAGS $yang_FLAGS $PTHREAD_CFLAGS"
 LIBS="$json_LIBS $netconf2_LIBS $yang_LIBS $PTHREAD_LIBS"
 
+AC_ARG_WITH([cert-path],
+    AC_HELP_STRING([--with-cert-path], [Set notification server certificate]),
+    CERT_PATH="$withval",
+    AC_MSG_ERROR([Certificate path must be set.])
+)
+AC_SUBST([CERT_PATH])
+
+AC_ARG_WITH([private-key-path],
+    AC_HELP_STRING([--with-private-key-path], [Set notification server private key]),
+    PRIVKEY_PATH="$withval",
+    AC_MSG_ERROR([Private key path must be set.])
+)
+AC_SUBST([PRIVKEY_PATH])
+
 AC_ARG_WITH([notifications],
 [AC_HELP_STRING([--without-notifications], [Disable notifications])],
 [AS_IF([test "x$with_notifications" == "xno"],[CFLAGS="$CFLAGS"],
diff --git a/src/notification_server.c b/src/notification_server.c
index 82a74a3..35d13f9 100644
--- a/src/notification_server.c
+++ b/src/notification_server.c
@@ -59,10 +59,6 @@
     DEMO_PROTOCOL_COUNT
 };
 
-#define SERVER_CERT_DIR "."
-#define SERVER_CERT "server.crt"
-#define SERVER_KEY "server.key"
-
 /*
  * We take a strict whitelist approach to stop ../ attacks
  */
@@ -847,8 +843,8 @@
     info.iface = NULL;
     info.protocols = protocols;
 
-    snprintf(cert_path, sizeof(cert_path), SERVER_CERT_DIR "/" SERVER_CERT);
-    snprintf(key_path, sizeof(key_path), SERVER_CERT_DIR "/" SERVER_KEY);
+    snprintf(cert_path, sizeof(cert_path), NOTIF_SERVER_CERT_PATH);
+    snprintf(key_path, sizeof(key_path), NOTIF_SERVER_PRIVKEY_PATH);
 
     info.ssl_cert_filepath = cert_path;
     info.ssl_private_key_filepath = key_path;