SSLAuthenticator would throw a NPE when bindOnInit=false was used on one of the connectors since enabledProtocols is null until the connector is started. Fall back on protocols when that happens (it is what is configured, rather than what is actually used, so it's not as good).

https://github.com/apache/tomcat/commit/1bb00911