SSL/TLS configuration

Cipher list using names as specified by the OpenSSL project.
More details on the OpenSSL page. The options secure and ALL will ignore all other values.

List of allowed SSL/TLS methods. The options secure and all will ignore all other values.

Comma-separated list of domain names used when auto-generating the certificate via the Let's Encrypt service.
Leave it empty when you don't want to use Let's Encrypt.

PEM content or file path for the SSL certificate or the chain of certificates used by this service.
This can also contain the associated private key.

PEM content or file path for the private SSL key associated to the SSL certificate(s) configured above.
Can be left empty when the key is included with the SSL certificate(s).

Password used for decrypting the SSL key stored on disk, either in a dedicated file or together with the SSL certificate(s).

Path or content of the certificate authority X.509 certificate in PEM format used to validate the connected peer.
When left empty, the peer's certificate is not validated. Only to be used for certificate-based authorization.

Path or HTTP URL to certificate revocation list.
Set it to crl-distribution-points to enable CRL distribution point (CDP) usage.
Leave it empty to disable CRL checking.

Time after which each CRL is read again for updates.
Set it to 0 to use the NextUpdate field from the CRL.