This option can be set to a file containing a certificate revocation list (CRL). This path is relative to if the path does not start with a /. tls certfile tls crlfile tls dh params file tls enabled tls cafile