I don't think you want to use this - it is for using with signed certificated.
Just remove this line.
If your key_file has a password you'll need to specify it - run through the config again and it will ask you for it.
Hopefully that will fix it.
I agree that it is a little confusing and I can see why you did what you did.