This option specifies the location of the server's certificate. This option is mandatory; the server must have a certificate in order to use SSL. For example:
[global]
ssl = yes
ssl hosts = 192.168.220.
ssl CA certFile = /usr/local/samba/cert/certFile
ssl server cert = /usr/local/samba/private/server.pem
There is no default for this option. Note that the certificate may contain the private key for the server.