[sslConfig]
sslRootCAPath = $SPLUNK_HOME/etc/auth/ca.pem