This reminds me of policy agent on z/OS. I would think ngnix has a manual on adding cipher suites, creating certificate stores, and handling handshakes for encryption in transit. RACF had ISPF utilities for adding certificate trust chains and creating RSA or ECDSA compatible certs.