change ssl verify_mode, and add ssl_ca_file option