Vhost aliases Whether or not the bundled welcome directory is used as the root web context Main vhost name Substitution options Matching options Configuration information for one SSL configuration. Password for both trustore and keystore When using JSSE that could be the only file, with OpenSSL there several files Additionally we should have a logic to find the type of the file (PEM, PKCS12 or JKS) before using it. comma separated list of encryption ciphers the configuration is allowed to use, that MUST NOT be the JVM default in of JSSE as contains weak ciphers. that is SSLCipherSuite when using OpenSSL (APR). that is OpenSSL SSLVerifyClient (optional,require,optionalNoCA,none) and clientAuth (true=require/false=none) Only in the OpenSSL (JSSE keystore contains both key and certificate). The file containing the CA certificates, truststoreFile in JSSE, note the password it same as the keystore password. A file or URL to get the revocation list. (actually: crlFile is JSSE and SSLCARevocationFile in OpenSSL)