What files my client needs to connect to a ssl protected broker?

[Tockra]

Hi Folks,

my broker has a
ca.crt
server.crt
server.key

Further I have a client.crt and client.key.

What exactly I have to set at my mqtt paho client to enable a ssl connection to my broker?
I'm very confused and the documentation doesn't help me.
There are trust_store, key_store, private_key, ca_path .
All together confuses me.
What is necessary? What is optional?
Which files I have to set there?

T