There are missing some attributes in this section:

• ssl-session-cache-size
• ssl-session-timeout

Also please note that all listeners in Undertow (ajp-listener, http-listener and https-listener) now have deprecated 'enabled' attribute. I think we should mention it too.