I checked if this was documented at some other place, and found that all ssl settings have been removed from reference.conf. That must be wrong. I'll create a separate ticket for that.