config for ca_file