STRING_MASK
f = NCONF_get_string(conf, ca_config.section, STRING_MASK);
p = NCONF_get_string(req_conf, SECTION, STRING_MASK);