Replying to myself since I can't edit my reply now. This is the link to the TaoBao Tengine doc describing the feature: http://tengine.taobao.org/document/http_

Replying to myself since I can't edit my reply now. This is the link to the TaoBao Tengine doc describing the feature: http://tengine.taobao.org/document/http_ssl.html http://tengine.taobao.org/document/http_ssl.html My memory was faulty: they have a way to get the passphrase, not the key itself. But wrt security, both are equivalent.