I recently set up a Duo Authentication Proxy server. The primary authentication server supports plain authentication only, so I had to establish ldaps (or starttls) for the transport. To do that, I have to set ssl_ca_certs_file to a path pointing to ...