diff --git a/core-common/src/main/java/org/glassfish/jersey/ExternalProperties.java b/core-common/src/main/java/org/glassfish/jersey/ExternalProperties.java
index 04ef1bd323..7115c805ce 100644
--- a/core-common/src/main/java/org/glassfish/jersey/ExternalProperties.java
+++ b/core-common/src/main/java/org/glassfish/jersey/ExternalProperties.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2020 Oracle and/or its affiliates. All rights reserved.
+ * Copyright (c) 2020, 2021 Oracle and/or its affiliates. All rights reserved.
  *
  * This program and the accompanying materials are made available under the
  * terms of the Eclipse Public License v. 2.0, which is available at
@@ -37,6 +37,16 @@ public final class ExternalProperties {
      */
     public static final String HTTP_NON_PROXY_HOSTS = "http.nonProxyHosts";
 
+    /**
+     * Property used to define supported cipher suites for apache connector
+     */
+    public static final String HTTPS_CIPHERSUITES = "https.cipherSuites";
+
+    /**
+     * Property used to define supported protocols for apache connector
+     */
+    public static final String HTTPS_PROTOCOLS = "https.protocols";
+
     /**
      * Prevent instantiation.
      */
diff --git a/tests/integration/externalproperties/pom.xml b/tests/integration/externalproperties/pom.xml
index eb56341c26..2720f0e3ac 100644
--- a/tests/integration/externalproperties/pom.xml
+++ b/tests/integration/externalproperties/pom.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!--
 
-    Copyright (c) 2020 Oracle and/or its affiliates. All rights reserved.
+    Copyright (c) 2020, 2021 Oracle and/or its affiliates. All rights reserved.
 
     This program and the accompanying materials are made available under the
     terms of the Eclipse Public License v. 2.0, which is available at
@@ -42,6 +42,36 @@
             <artifactId>jersey-test-framework-provider-jetty</artifactId>
             <scope>test</scope>
         </dependency>
+        <dependency>
+            <groupId>org.glassfish.jersey.connectors</groupId>
+            <artifactId>jersey-apache-connector</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.glassfish.jersey.connectors</groupId>
+            <artifactId>jersey-grizzly-connector</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.glassfish.jersey.connectors</groupId>
+            <artifactId>jersey-jdk-connector</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.glassfish.jersey.connectors</groupId>
+            <artifactId>jersey-jetty-connector</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.glassfish.jersey.connectors</groupId>
+            <artifactId>jersey-netty-connector</artifactId>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.glassfish.jersey.test-framework.providers</groupId>
+            <artifactId>jersey-test-framework-provider-grizzly2</artifactId>
+            <scope>test</scope>
+        </dependency>
     </dependencies>
 
     <build>
diff --git a/tests/integration/externalproperties/src/test/java/org/glassfish/jersey/tests/externalproperties/ApacheUseSystemPropertiesTest.java b/tests/integration/externalproperties/src/test/java/org/glassfish/jersey/tests/externalproperties/ApacheUseSystemPropertiesTest.java
new file mode 100644
index 0000000000..ac96a91ab3
--- /dev/null
+++ b/tests/integration/externalproperties/src/test/java/org/glassfish/jersey/tests/externalproperties/ApacheUseSystemPropertiesTest.java
@@ -0,0 +1,169 @@
+/*
+ * Copyright (c) 2021 Oracle and/or its affiliates. All rights reserved.
+ *
+ * This program and the accompanying materials are made available under the
+ * terms of the Eclipse Public License v. 2.0, which is available at
+ * http://www.eclipse.org/legal/epl-2.0.
+ *
+ * This Source Code may also be made available under the following Secondary
+ * Licenses when the conditions for such availability set forth in the
+ * Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+ * version 2 with the GNU Classpath Exception, which is available at
+ * https://www.gnu.org/software/classpath/license.html.
+ *
+ * SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+ */
+
+package org.glassfish.jersey.tests.externalproperties;
+
+import org.glassfish.jersey.ExternalProperties;
+import org.glassfish.jersey.apache.connector.ApacheClientProperties;
+import org.glassfish.jersey.apache.connector.ApacheConnectorProvider;
+import org.glassfish.jersey.client.ClientConfig;
+import org.glassfish.jersey.server.ResourceConfig;
+import org.glassfish.jersey.test.JerseyTest;
+import org.glassfish.jersey.test.grizzly.GrizzlyTestContainerFactory;
+import org.glassfish.jersey.test.spi.TestContainerFactory;
+import org.junit.After;
+import org.junit.Assert;
+import org.junit.Rule;
+import org.junit.Test;
+import org.junit.rules.ExpectedException;
+
+import javax.net.ssl.SSLContext;
+import javax.net.ssl.SSLParameters;
+import javax.ws.rs.GET;
+import javax.ws.rs.Path;
+import javax.ws.rs.ProcessingException;
+import javax.ws.rs.client.Client;
+import javax.ws.rs.client.ClientBuilder;
+import javax.ws.rs.core.Application;
+import javax.ws.rs.core.Response;
+import javax.ws.rs.core.UriBuilder;
+import java.net.URI;
+import java.util.Optional;
+
+public class ApacheUseSystemPropertiesTest extends JerseyTest {
+
+    private SSLContext serverSslContext;
+    private SSLParameters serverSslParameters;
+
+    @Rule
+    public final ExpectedException exception = ExpectedException.none();
+
+    @Override
+    protected TestContainerFactory getTestContainerFactory() {
+        return new GrizzlyTestContainerFactory();
+    }
+
+    @Path("secure")
+    public static class TestResource {
+
+        @GET
+        public Response getOk() {
+            return Response.ok("ok").build();
+        }
+    }
+
+    @Override
+    protected Application configure() {
+        return new ResourceConfig(TestResource.class);
+    }
+
+    @Override
+    protected URI getBaseUri() {
+        return UriBuilder
+                .fromUri("https://localhost")
+                .port(getPort())
+                .build();
+    }
+
+    @Override
+    protected Optional<SSLContext> getSslContext() {
+        if (serverSslContext == null) {
+            serverSslContext = SslUtils.createServerSslContext();
+        }
+        return Optional.of(serverSslContext);
+    }
+
+    @Override
+    protected Optional<SSLParameters> getSslParameters() {
+        if (serverSslParameters == null) {
+            serverSslParameters = new SSLParameters();
+            serverSslParameters.setNeedClientAuth(false);
+        }
+        return Optional.of(serverSslParameters);
+    }
+
+    @After
+    public void cleanSystemProperties() {
+        System.getProperties().remove(ExternalProperties.HTTPS_PROTOCOLS);
+        System.getProperties().remove(ExternalProperties.HTTPS_CIPHERSUITES);
+    }
+
+    private ClientConfig createApacheConfig() {
+        ClientConfig config = new ClientConfig();
+        config.property(ApacheClientProperties.USE_SYSTEM_PROPERTIES, true);
+        config.connectorProvider(new ApacheConnectorProvider());
+        return config;
+    }
+
+    @Test
+    public void testAllowedProtocol() {
+        System.setProperty(ExternalProperties.HTTPS_PROTOCOLS, "TLSv1.2");
+        SSLContext clientSslContext = SslUtils.createClientSslContext("TLSv1.2");
+
+        Client client = ClientBuilder.newBuilder()
+                .withConfig(createApacheConfig())
+                .sslContext(clientSslContext)
+                .build();
+
+        Response response = client.target(getBaseUri()).path("secure").request().get();
+        Assert.assertEquals("ok", response.readEntity(String.class));
+    }
+
+    @Test
+    public void testNotAllowedProtocol() {
+        System.setProperty(ExternalProperties.HTTPS_PROTOCOLS, "SSLv3");
+        SSLContext clientSslContext = SslUtils.createClientSslContext("TLSv1.2");
+
+        Client client = ClientBuilder.newBuilder()
+                .withConfig(createApacheConfig())
+                .sslContext(clientSslContext)
+                .build();
+
+        exception.expect(ProcessingException.class);
+        client.target(getBaseUri()).path("secure").request().get();
+    }
+
+    @Test
+    public void testAllowedCipherSuites() {
+        System.setProperty(ExternalProperties.HTTPS_CIPHERSUITES, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256");
+        System.setProperty(ExternalProperties.HTTPS_PROTOCOLS, "TLSv1.2");
+        SSLContext clientSslContext = SslUtils.createClientSslContext("TLSv1.2");
+
+        Client client = ClientBuilder.newBuilder()
+                .withConfig(createApacheConfig())
+                .sslContext(clientSslContext)
+                .build();
+
+        Response response = client.target(getBaseUri()).path("secure").request().get();
+        Assert.assertEquals("ok", response.readEntity(String.class));
+    }
+
+    @Test
+    public void testNotAllowedCipherSuites() {
+        System.setProperty(ExternalProperties.HTTPS_CIPHERSUITES, "TLS_AES");
+        System.setProperty(ExternalProperties.HTTPS_PROTOCOLS, "TLSv1.2");
+        SSLContext clientSslContext = SslUtils.createClientSslContext("TLSv1.2");
+
+        Client client = ClientBuilder.newBuilder()
+                .withConfig(createApacheConfig())
+                .sslContext(clientSslContext)
+                .build();
+
+        exception.expect(ProcessingException.class);
+        client.target(getBaseUri()).path("secure").request().get();
+    }
+
+}
diff --git a/tests/integration/externalproperties/src/test/java/org/glassfish/jersey/tests/externalproperties/HttpProxyTest.java b/tests/integration/externalproperties/src/test/java/org/glassfish/jersey/tests/externalproperties/HttpProxyTest.java
index 94100297f0..e71cafadb7 100644
--- a/tests/integration/externalproperties/src/test/java/org/glassfish/jersey/tests/externalproperties/HttpProxyTest.java
+++ b/tests/integration/externalproperties/src/test/java/org/glassfish/jersey/tests/externalproperties/HttpProxyTest.java
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2020 Oracle and/or its affiliates. All rights reserved.
+ * Copyright (c) 2020, 2021 Oracle and/or its affiliates. All rights reserved.
  *
  * This program and the accompanying materials are made available under the
  * terms of the Eclipse Public License v. 2.0, which is available at
@@ -22,6 +22,7 @@
 import org.glassfish.jersey.ExternalProperties;
 import org.glassfish.jersey.server.ResourceConfig;
 import org.glassfish.jersey.test.JerseyTest;
+import org.junit.After;
 import org.junit.Assert;
 import org.junit.Before;
 import org.junit.Test;
@@ -38,6 +39,7 @@ public class HttpProxyTest extends JerseyTest {
     private static final String PROXY_HOST = "localhost";
     private static final String PROXY_PORT = "9997";
     private static boolean proxyHit = false;
+    private Server server;
 
     @Path("resource")
     public static class ProxyTestResource {
@@ -58,7 +60,7 @@ protected Application configure() {
     public void startFakeProxy() {
         System.setProperty(ExternalProperties.HTTP_PROXY_HOST, PROXY_HOST);
         System.setProperty(ExternalProperties.HTTP_PROXY_PORT, PROXY_PORT);
-        Server server = new Server(Integer.parseInt(PROXY_PORT));
+        server = new Server(Integer.parseInt(PROXY_PORT));
         server.setHandler(new ProxyHandler(false));
         try {
             server.start();
@@ -67,6 +69,11 @@ public void startFakeProxy() {
         }
     }
 
+    @After
+    public void stopFakeProxy() throws Exception {
+        server.stop();
+    }
+
     @Test
     public void testProxy() {
         System.setProperty(ExternalProperties.HTTP_NON_PROXY_HOSTS, "");
diff --git a/tests/integration/externalproperties/src/test/java/org/glassfish/jersey/tests/externalproperties/SslUtils.java b/tests/integration/externalproperties/src/test/java/org/glassfish/jersey/tests/externalproperties/SslUtils.java
new file mode 100644
index 0000000000..d4bf55e0b2
--- /dev/null
+++ b/tests/integration/externalproperties/src/test/java/org/glassfish/jersey/tests/externalproperties/SslUtils.java
@@ -0,0 +1,131 @@
+/*
+ * Copyright (c) 2021 Oracle and/or its affiliates. All rights reserved.
+ *
+ * This program and the accompanying materials are made available under the
+ * terms of the Eclipse Public License v. 2.0, which is available at
+ * http://www.eclipse.org/legal/epl-2.0.
+ *
+ * This Source Code may also be made available under the following Secondary
+ * Licenses when the conditions for such availability set forth in the
+ * Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+ * version 2 with the GNU Classpath Exception, which is available at
+ * https://www.gnu.org/software/classpath/license.html.
+ *
+ * SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+ */
+
+package org.glassfish.jersey.tests.externalproperties;
+
+import javax.net.ssl.KeyManager;
+import javax.net.ssl.KeyManagerFactory;
+import javax.net.ssl.SSLContext;
+import javax.net.ssl.TrustManager;
+import javax.net.ssl.TrustManagerFactory;
+import java.io.InputStream;
+import java.security.KeyStore;
+
+/**
+ * Utility to easily create a SSLContext for a server or a client
+ *
+ * The utility class uses the keystore and truststore from the
+ * test resources to generate the KeyManagers, TrustManagers
+ * and the SSLContext
+ */
+public final class SslUtils {
+
+    private static final String SERVER_IDENTITY_PATH = "server-identity.jks";
+    private static final char[] SERVER_IDENTITY_PASSWORD = "secret".toCharArray();
+    private static final String SERVER_TRUSTSTORE_PATH = "server-truststore.jks";
+    private static final char[] SERVER_TRUSTSTORE_PASSWORD = "secret".toCharArray();
+
+    private static final String CLIENT_IDENTITY_PATH = "client-identity.jks";
+    private static final char[] CLIENT_IDENTITY_PASSWORD = "secret".toCharArray();
+    private static final String CLIENT_TRUSTSTORE_PATH = "client-truststore.jks";
+    private static final char[] CLIENT_TRUSTSTORE_PASSWORD = "secret".toCharArray();
+
+    private static final String KEYSTORE_TYPE = "PKCS12";
+
+    private SslUtils() {}
+
+    protected static SSLContext createServerSslContext() {
+        return createSslContext(
+                true,
+                false,
+                SERVER_IDENTITY_PATH,
+                SERVER_IDENTITY_PASSWORD,
+                SERVER_TRUSTSTORE_PATH,
+                SERVER_TRUSTSTORE_PASSWORD,
+                null
+        );
+    }
+
+    protected static SSLContext createClientSslContext(String protocol) {
+        return createSslContext(
+                false,
+                true,
+                CLIENT_IDENTITY_PATH,
+                CLIENT_IDENTITY_PASSWORD,
+                CLIENT_TRUSTSTORE_PATH,
+                CLIENT_TRUSTSTORE_PASSWORD,
+                protocol
+        );
+    }
+
+    private static SSLContext createSslContext(
+            boolean includeKeyMaterial,
+            boolean includeTrustMaterial,
+            String keyStorePath,
+            char[] keyStorePassword,
+            String trustStorePath,
+            char[] trustStorePassword,
+            String protocol) {
+
+        try {
+            KeyManager[] keyManagers = null;
+            TrustManager[] trustManagers = null;
+
+            if (includeKeyMaterial) {
+                keyManagers = createKeyManagers(keyStorePath, keyStorePassword);
+            }
+
+            if (includeTrustMaterial) {
+                trustManagers = createTrustManagers(trustStorePath, trustStorePassword);
+            }
+
+            SSLContext sslContext = protocol == null ? SSLContext.getInstance("TLS") : SSLContext.getInstance(protocol);
+            sslContext.init(keyManagers, trustManagers, null);
+            return sslContext;
+        } catch (Exception e) {
+            throw new RuntimeException(e);
+        }
+    }
+
+    private static TrustManager[] createTrustManagers(String keyStorePath, char[] keyStorePassword) throws Exception {
+        KeyStore trustStore = getKeyStore(keyStorePath, keyStorePassword);
+
+        TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
+        trustManagerFactory.init(trustStore);
+        return trustManagerFactory.getTrustManagers();
+    }
+
+    private static KeyManager[] createKeyManagers(String keyStorePath, char[] keyStorePassword) throws Exception {
+        KeyStore keyStore = getKeyStore(keyStorePath, keyStorePassword);
+
+        KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
+        keyManagerFactory.init(keyStore, keyStorePassword);
+        return keyManagerFactory.getKeyManagers();
+    }
+
+    private static KeyStore getKeyStore(String path, char[] keyStorePassword) throws Exception {
+        try (InputStream inputStream = getResource(path)) {
+            KeyStore keyStore = KeyStore.getInstance(KEYSTORE_TYPE);
+            keyStore.load(inputStream, keyStorePassword);
+            return keyStore;
+        }
+    }
+
+    private static InputStream getResource(String path) {
+        return SslUtils.class.getClassLoader().getResourceAsStream(path);
+    }
+
+}
diff --git a/tests/integration/externalproperties/src/test/resources/client-identity.jks b/tests/integration/externalproperties/src/test/resources/client-identity.jks
new file mode 100644
index 0000000000..d3922a11c1
Binary files /dev/null and b/tests/integration/externalproperties/src/test/resources/client-identity.jks differ
diff --git a/tests/integration/externalproperties/src/test/resources/client-truststore.jks b/tests/integration/externalproperties/src/test/resources/client-truststore.jks
new file mode 100644
index 0000000000..539185fda4
Binary files /dev/null and b/tests/integration/externalproperties/src/test/resources/client-truststore.jks differ
diff --git a/tests/integration/externalproperties/src/test/resources/server-identity.jks b/tests/integration/externalproperties/src/test/resources/server-identity.jks
new file mode 100644
index 0000000000..76a21aaedd
Binary files /dev/null and b/tests/integration/externalproperties/src/test/resources/server-identity.jks differ
diff --git a/tests/integration/externalproperties/src/test/resources/server-truststore.jks b/tests/integration/externalproperties/src/test/resources/server-truststore.jks
new file mode 100644
index 0000000000..22285abc59
Binary files /dev/null and b/tests/integration/externalproperties/src/test/resources/server-truststore.jks differ