diff --git a/ldap-server/gencert.cgi b/ldap-server/gencert.cgi
index c520daad5..a657d0ae7 100755
--- a/ldap-server/gencert.cgi
+++ b/ldap-server/gencert.cgi
@@ -13,6 +13,8 @@ $conf = &get_config();
 if ($in{'dest_def'}) {
 	$keyfile = &find_value("TLSCertificateKeyFile", $conf);
 	$certfile = &find_value("TLSCertificateFile", $conf);
+	$keyfile =~ /^\// || &error($text{'gencert_epath'});
+	$certfile =~ /^\// || &error($text{'gencert_epath'});
 	}
 else {
 	# In some dir
diff --git a/ldap-server/lang/en b/ldap-server/lang/en
index 54c6a9efb..0592235a2 100644
--- a/ldap-server/lang/en
+++ b/ldap-server/lang/en
@@ -262,6 +262,7 @@ gencert_same=Current config files
 gencert_dir=Directory
 gencert_err=Failed to generate certificate
 gencert_edest=Destination directory does not exist
+gencert_epath=Certificate and key files in the LDAP server config must be absolute paths
 
 perms_err=Failed to fix file ownership