[Samba] tls verify peer with custom self-signed certificate

[lingpanda101]

Hello,

     When using a custom self-signed certificate, what is the 
appropriate value for 'tls verify peer ='?

The wiki sates to use 'tls cafile =' for a custom self-signed 
certificate in smb.conf. If no ca exist, does Samba immediately fail the 
check if using the default 'tls verify peer = as strict as possible'? 
I've looked through the man page (Samba 4.7.5) but don't see anything 
mentioning when using a self signed certificate. Thanks.

-- 
--
James