SQUASH??? update to support SSL_ca_file as well as SSL_ca_path