diff --git a/net/radsecproxy/files/radsecproxy.init b/net/radsecproxy/files/radsecproxy.init
index f070f2aadd5e4a..c2e41732705de5 100644
--- a/net/radsecproxy/files/radsecproxy.init
+++ b/net/radsecproxy/files/radsecproxy.init
@@ -87,9 +87,10 @@ client_block() {
 	append_params "$cfg" \
 		Include host type secret tls matchCertificateAttribute duplicateInterval \
 		AddTTL fticksVISCOUNTRY fticksVISINST rewrite rewriteIn rewriteOut \
-		rewriteAttribute
+		rewriteAttribute serverName PSKkey PSKidentity
 	append_bools "$cfg" \
-		IPv4Only IPv6Only certificateNameCheck
+		IPv4Only IPv6Only certificateNameCheck requireMessageAuthenticator \
+		requireMessageAuthenticatorProxy
 	echo "}" >> "$CONFFILE"
 }
 
@@ -101,9 +102,11 @@ server_block() {
 	append_params "$cfg" \
 		Include host port type secret tls matchCertificateAttribute \
 		AddTTL rewrite rewriteIn rewriteOut retryCount dynamicLookupCommand \
-		retryInterval
+		retryInterval serverName SNIservername PSKkey PSKidentity DTLSForceMTU \
+		source
 	append_bools "$cfg" \
-		IPv4Only IPv6Only certificateNameCheck statusServer LoopPrevention
+		IPv4Only IPv6Only certificateNameCheck statusServer LoopPrevention SNI \
+		requireMessageAuthenticator blockingStartup
 	echo "}" >> "$CONFFILE"
 }