[main] listen_addr = cadir = /etc/pki/func/ca certroot = /data/srv/func/certmaster/certs csrroot = /data/srv/func/certmaster/csrs autosign = yes