better handling for null defaultSslKeySha