diff --git a/apps/emqx_gateway/src/emqx_gateway_http.erl b/apps/emqx_gateway/src/emqx_gateway_http.erl
index e5c927a1a..aab99ac13 100644
--- a/apps/emqx_gateway/src/emqx_gateway_http.erl
+++ b/apps/emqx_gateway/src/emqx_gateway_http.erl
@@ -294,7 +294,7 @@ with_channel(GwName, ClientId, Fun) ->
 return_http_error(Code, Msg) ->
     {Code, emqx_json:encode(
              #{code => codestr(Code),
-               reason => emqx_gateway_utils:stringfy(Msg)
+               message => emqx_gateway_utils:stringfy(Msg)
               })
     }.
 
diff --git a/apps/emqx_gateway/src/emqx_gateway_schema.erl b/apps/emqx_gateway/src/emqx_gateway_schema.erl
index 64cf6d331..6570d5346 100644
--- a/apps/emqx_gateway/src/emqx_gateway_schema.erl
+++ b/apps/emqx_gateway/src/emqx_gateway_schema.erl
@@ -109,25 +109,26 @@ fields(exproto) ->
 
 fields(exproto_grpc_server) ->
     [ {bind, sc(hoconsc:union([ip_port(), integer()]))}
-    , {ssl, sc_meta(ref(simple_ssl_options),
+    , {ssl, sc_meta(ref(ssl_server_opts),
                     #{nullable => {true, recursively}})}
     ];
 
 fields(exproto_grpc_handler) ->
     [ {address, sc(binary())}
-    , {ssl, sc_meta(ref(simple_ssl_options),
+    , {ssl, sc_meta(ref(ssl_client_opts),
                     #{nullable => {true, recursively}})}
     ];
 
-fields(simple_ssl_options) ->
-    [ {cacertfile, sc_meta(string(), #{nullable => true})}
-    , {certfile, sc_meta(string(), #{nullable => true})}
-    , {keyfile, sc_meta(string(), #{nullable => true})}
-    , {verify, sc(hoconsc:enum([verify_peer, verify_none]), verify_none)}
-    , {depth, sc(integer(), 10)}
-    , {password, sc_meta(string(), #{sensitive => true, nullable => true})}
-    %% XXX: More confs ???
-    ];
+fields(ssl_server_opts) ->
+    emqx_schema:server_ssl_opts_schema(
+      #{ depth => 10
+       , reuse_sessions => true
+       , versions => tls_all_available
+       , ciphers => tls_all_available
+       }, true);
+
+fields(ssl_client_opts) ->
+    emqx_schema:client_ssl_opts_schema(#{});
 
 fields(clientinfo_override) ->
     [ {username, sc(binary())}