document OIDCCABundlePath
in auth_openidc.conf
# NB: this can be overridden on a per-OP basis in the .conf file using the key: ssl_validate_server
#OIDCSSLValidateServer [On|Off]
+# Sets the path to the CA bundle to be used by cURL
+# When not defined, the default bundle for libcurl is used as provided by the platform.
+#OIDCCABundlePath <path>
+
# Require configured issuer to match the issuer returned in id_token.
# (Disable to support Azure AD multi-tenant applications.)
# When not defined, the default value is "On".
