add timeout/open_timeout to CA requests