SSLOptions needs to be for the general VirtualHost block, not wrapped in a filematch.

...puppetmaster under passenger fails without this.