This option can be set to a file (PEM format) containing the RSA private key. This file must be accessible without a pass-phrase, i.e. it must not be encrypted. tls certfile tls crlfile tls dh params file tls enabled tls cafile