diff --git a/manifests/params.pp b/manifests/params.pp
index 8137b22..c6177ea 100644
--- a/manifests/params.pp
+++ b/manifests/params.pp
@@ -60,10 +60,10 @@ class qdr::params {
   # listener attributes
   $listener_addr            = '127.0.0.1'
   $listener_port            = '5672'
-  $listener_ssl_cert_db     = 'UNSET'
-  $listener_ssl_cert_file   = 'UNSET'
-  $listener_ssl_key_file    = 'UNSET'
-  $listener_ssl_pw_file     = 'UNSET'
+  $listener_ssl_cert_db     = undef
+  $listener_ssl_cert_file   = undef
+  $listener_ssl_key_file    = undef
+  $listener_ssl_pw_file     = undef
   $listener_ssl_password    = undef
   $listener_sasl_mech       = 'ANONYMOUS,DIGEST-MD5,EXTERNAL,PLAIN'
   $listener_auth_peer       = 'no'
diff --git a/templates/qdrouterd.conf.erb b/templates/qdrouterd.conf.erb
index 23444e5..a0d6c4b 100644
--- a/templates/qdrouterd.conf.erb
+++ b/templates/qdrouterd.conf.erb
@@ -33,10 +33,19 @@ router {
     routerId: <%= @router_id %>
 }
 
+sslProfile {
+    name: <%= @container_name %>
+    certDb: <%= @listener_ssl_cert_db %>
+    certFile: <%= @listener_ssl_cert_file %>
+    keyFile: <%= @listener_ssl_key_file %>
+}
+
 listener {
     addr: <%= @listener_addr %>
     port: <%= @listener_port %>
+    sslProfile: <%= @container_name %>
     authenticatePeer: <%= @listener_auth_peer %>
+    saslMechanisms: <%= @listener_sasl_mech %>
 }
 
 fixedAddress {