check_certificate = off ca_directory = /usr/ssl/certs