Add CA option to SSL configuration