Vhost aliases Main vhost name Whether or not the bundled welcome directory is used as the root web context Substitution options Matching options Configuration information for one SSL configuration. Password for both keystore When using JSSE that could be the only file, with OpenSSL there several files Additionally we should have a logic to find the type of the file (PEM, PKCS12 or JKS) before using it. comma separated list of encryption ciphers the configuration is allowed to use, that MUST NOT be the JVM default in of JSSE as contains weak ciphers. that is SSLCipherSuite when using OpenSSL (APR). that is OpenSSL SSLVerifyClient (optional,require,optionalNoCA,none) and clientAuth (true=require/false=none) Only in the OpenSSL (JSSE keystore contains both key and certificate). The file containing the CA certificates, truststoreFile in JSSE, note the password it same as the keystore password. A file or URL to get the revocation list. (actually: crlFile is JSSE and SSLCARevocationFile in OpenSSL) Password of trust store for JSE Type of keystore type for JSE value can be pkcs12 or jks Type of keystore type for JSE value can be pkcs12 or jks