specify key_path and cert_path in configuration