SoapClient:= TIdHTTPRIO.Create(Self);
  with SoapClient.HTTPWebNode.HttpClient do
    begin
     AllowCookies:= True;
     HandleRedirects:= False;
     ProtocolVersion:= pv1_1;
     if not SSLRequired then begin // HTTP
                             IOHandler.Free;
                             IOHandler:= nil;
                             end
     else
     begin // HTTPS
     IOHandler:= TIdSSLIOHandlerSocket.Create(SoapClient.HTTPWebNode.HttpClient);

      with
        TIdSSLIOHandlerSocket
        (IOHandler), SSLOptions do
        begin
          Method:= sslvSSLv23;

          CertFile:= FirmDir+'client.crt';
          KeyFile:= FirmDir+'key.pem';
          RootCertFile:= FirmDir+'ca.crt';

          Mode:= sslmClient;

          OnGetPassword := GetKey;
          OnStatusInfo := IdSSLIOHandlerSocket1StatusInfo;
        end;
     end;
  end;