update SSL options in the 00-default.conf