ENV_SIGNER_DIGEST
md = NCONF_get_string(conf, section, ENV_SIGNER_DIGEST);
ts_CONF_lookup_fail(section, ENV_SIGNER_DIGEST);
ts_CONF_invalid(section, ENV_SIGNER_DIGEST);