--ssl-protocols=protocols
    Specifies a range or a comma- or space-delimited list of the SSL/TLS protocols will enable for SSL/TLS connections. Supported protocols include TLSv1.2 and TLSv1.3. Ranges can be provided in a form of two protocol names separated with a dash, or as a single protocol name with a plus sign. For example, use TLSv1.2-TLSv1.3 to allow TLSv1.2 and TLSv1.3. Use TLSv1.2+ to allow TLSv1.2 and any later protocol. The option accepts a list of protocols or exactly one range. The range is a preferred way of specifying protocols and the option always behaves as if the range between the minimum and the maximum specified version is provided, i.e., if the option is set to TLSv1.X,TLSv1.(X+2), the TLSv1.(X+1) will also be enabled as if it was a range. Regardless of order, the highest protocol supported by both sides will be chosen when making the connection. The default when this option is omitted is TLSv1.2 or later.

--ssl-ciphers=ciphers
    Specifies, in OpenSSL cipher string format, the ciphers will support for SSL/TLS connections with TLSv1.2. The default when this option is omitted is DEFAULT:@SECLEVEL=2.

--ssl-ciphersuites=ciphersuites
    Specifies, in OpenSSL ciphersuite string format, the ciphersuites will support for SSL/TLS connections with TLSv1.3 and later. Default value from OpenSSL will be used when this option is omitted.