The correct environment variable corresponding to the `ca_file` variable is `CONSUL_CACERT` and not `CONSUL_CAFILE`. See `backend/remote-state/consul/backend.go` line 77.