tls additions:

    - cacert_path can be customized more easily
    - add a new get_ca function to get the cacert path or content