ssl endpoint config