You are using the wrong obclient command. First, you can use the command "obclient --help|grep ssl" to check how to use the current obclient ssl-related parameters. Second, you can use the command "obclient --version" to check the version of obclient you are using. The "ssl=enabled" parameter is used in a very old version of obclient and has been deprecated in the new version. You can try adding this parameter "--ssl-ca=ca.pem"