...

Instead of providing sslCert and sslKey configuration properties, sslOptions can be specified, which allows the use of all possible options for SSL configuration as specified provided here.

sslOptions can either be specified as an object, or as a string pointing to an encrypted file created with the store_options.js utility.

Using store_options.js

The store_options.js script creates an encrypted file containing the SSL options. This is especially useful when you are using a an SSL passphrase and don't want to store it in the clear in your configuration file.

...

The default output file is name is ssl_options. To specify a different output file, use the --file command line parameter. For eample:

...