diff --git a/docs/user-guide/tunnels.md b/docs/user-guide/tunnels.md
index 7340bd3..b81a322 100644
--- a/docs/user-guide/tunnels.md
+++ b/docs/user-guide/tunnels.md
@@ -124,7 +124,7 @@ Optional parameters:
 * inport        -- what port at local destination server tunnel listens to. Same as *port* by default.
 * accesslist    -- list of comma-separated of b32 address (without .b32.i2p) allowed to connect. Everybody is allowed by default.  
 * gzip          -- turns internal compression off if set to false. true by default.  
-* signaturetype -- means signature type for new keys. 0 - DSA, 1- ECDSA-P256, 7 -EDDSA, 11 -RedDSA.  7 by default.  
+* signaturetype -- means signature type for new keys. 0 - DSA, 1- ECDSA-P256, 7 -EDDSA, 11 -RedDSA. 7 by default.  
 * cryptotype    -- crypto type for new keys. Experimental. Should be always 0.
 * enableuniquelocal -- if true, connection to local address will look like 127.x.x.x where x.x.x is first 3 bytes of incoming connection peer's ident hash. true by default.  
 * address       -- IP address of an interface tunnel is connected to host from. Usually not used.   
@@ -147,6 +147,7 @@ Optional parameters:
 
 * hostoverride -- value to send in 'Host:' header, default: the same as *host* parameter
 * gzip         -- should we compress contents at I2P level. default: true
+* ssl          -- Use SSL connection to upstream server. `hostoverride` parameter can be used to set SNI domain. default: false
 
 Server/IRC tunnels
 -------------------