This option specifies the location of the server's private key. You should ensure that the location of the file cannot be accessed by anyone other than
root
. For example:
[global]
ssl = yes
ssl hosts = 192.168.220.
ssl CA certFile = /usr/local/samba/cert/certFile
ssl server key = /usr/local/samba/private/samba.pem
There is no default for this option. Note that the private key may be contained in the certificate for the server.