add TLS client cert paramaters
diff --git a/manifests/server.pp b/manifests/server.pp
index de069cb..979a13d 100644
--- a/manifests/server.pp
+++ b/manifests/server.pp
@@ -69,6 +69,8 @@
   $smtp_sasl_security_options = undef,
   $smtp_tls_CAfile = undef,
   $smtp_tls_CApath = undef,
+  $smtp_tls_key_file = undef,
+  $smtp_tls_cert_file = undef,
   $smtp_tls_security_level = undef,
   $smtp_tls_secure_cert_match = undef,
   $smtp_tls_note_starttls_offer = false,
diff --git a/templates/main.cf-el5.erb b/templates/main.cf-el5.erb
index a70e6f5..c736684 100644
--- a/templates/main.cf-el5.erb
+++ b/templates/main.cf-el5.erb
@@ -738,6 +738,12 @@
 <% if @smtpd_tls_CAfile -%>
 smtpd_tls_CAfile = <%= @smtpd_tls_CAfile %>
 <% end -%>
+<% if @smtpd_tls_ask_ccert -%>
+smtpd_tls_ask_ccert = yes
+<% end -%>
+<% if @tls_append_default_CA -%>
+tls_append_default_CA = yes
+<% end -%>
 
 <% end -%>
 <% if @smtpd_sasl_auth -%>
@@ -771,6 +777,12 @@
 <% if @smtp_sasl_tls or @smtp_use_tls -%>
 smtp_use_tls = yes
 <% end -%>
+<% if @smtp_tls_key_file -%>
+smtp_tls_key_file = <%= @smtp_tls_key_file %>
+<% end -%>
+<% if @smtp_tls_cert_file -%>
+smtp_tls_cert_file = <%= @smtp_tls_cert_file %>
+<% end -%>
 <% if @smtp_tls_secure_cert_match -%>
 smtp_tls_secure_cert_match = <%= @smtp_tls_secure_cert_match %>
 <% end -%>
diff --git a/templates/main.cf.erb b/templates/main.cf.erb
index a1426ff..60b8411 100644
--- a/templates/main.cf.erb
+++ b/templates/main.cf.erb
@@ -785,6 +785,12 @@
 <% if @smtp_sasl_tls or @smtp_use_tls -%>
 smtp_use_tls = yes
 <% end -%>
+<% if @smtp_tls_key_file -%>
+smtp_tls_key_file = <%= @smtp_tls_key_file %>
+<% end -%>
+<% if @smtp_tls_cert_file -%>
+smtp_tls_cert_file = <%= @smtp_tls_cert_file %>
+<% end -%>
 <% if @smtp_tls_secure_cert_match -%>
 smtp_tls_secure_cert_match = <%= @smtp_tls_secure_cert_match %>
 <% end -%>