ssl = required
ssl_protocols = !SSLv2 !SSLv3