This option can be set to a file containing a certificate revocation list (CRL). tls certfile tls crlfile tls dh params file tls enabled tls cafile