There are two formats you can write options in and the man page does not mention format 2.
format 1: tls key "/etc/ssl/private/server.key" tls certificate "/etc/ssl/server.crt" format 2: tls { key "/etc/ssl/private/server.key" certificate "/etc/ssl/server.crt" } Besides this, https is pretty much a requirement now and the only tls example mentioned in the man page is a single line using an implicit default key and a default certificate: listen on * tls port 443 -- -alfred