Support specifying path(s) to CA certificate(s)

Wires the 'ca_certificates' configuration option
through to tls.connect's 'ca' option.

packages/xo-server-auth-ldap/src/index.js

@@ -42,6 +42,10 @@ class AuthLdap {
       clientOpts.tlsOptions.rejectUnauthorized = conf.check_certificate
     }
 
+    if (conf.ca_certificates !== undefined) {
+      clientOpts.tlsOptions.ca = conf.ca_certificates
+    }
+
     const {base: searchBase} = conf
     const searchFilter = conf.filter || '(uid={{name}})'