Make it possible to configure SSL certificate forwarding over HTTP

replacement for #5191