diff --git a/manifests/wsgi/apache.pp b/manifests/wsgi/apache.pp
index 352a7d2..aaba784 100644
--- a/manifests/wsgi/apache.pp
+++ b/manifests/wsgi/apache.pp
@@ -101,7 +101,7 @@ class zaqar::wsgi::apache (
   $port                        = 8888,
   $bind_host                   = undef,
   $path                        = '/',
-  $ssl                         = true,
+  $ssl                         = undef,
   $workers                     = $::os_workers,
   $ssl_cert                    = undef,
   $ssl_key                     = undef,
@@ -119,11 +119,16 @@ class zaqar::wsgi::apache (
   $custom_wsgi_process_options = {},
 ) {
 
+  if $ssl == undef {
+    warning('Default of the ssl parameter will be changed in a future release')
+  }
+  $ssl_real = pick($ssl, true)
+
   include zaqar::deps
   include zaqar::params
   include apache
   include apache::mod::wsgi
-  if $ssl {
+  if $ssl_real {
     include apache::mod::ssl
   }
 
@@ -134,7 +139,7 @@ class zaqar::wsgi::apache (
     path                        => $path,
     priority                    => $priority,
     servername                  => $servername,
-    ssl                         => $ssl,
+    ssl                         => $ssl_real,
     ssl_ca                      => $ssl_ca,
     ssl_cert                    => $ssl_cert,
     ssl_certs_dir               => $ssl_certs_dir,
diff --git a/releasenotes/notes/prepare-to-change-apache-ssl-dcc2c9a7ec774f5d.yaml b/releasenotes/notes/prepare-to-change-apache-ssl-dcc2c9a7ec774f5d.yaml
new file mode 100644
index 0000000..7331493
--- /dev/null
+++ b/releasenotes/notes/prepare-to-change-apache-ssl-dcc2c9a7ec774f5d.yaml
@@ -0,0 +1,6 @@
+---
+upgrade:
+  - |
+    Default value of the ``zaqar::wsgi::apache::ssl`` parameter will be
+    changed from ``true`` to ``false`` in a future release. Make sure
+    the parameter is set to the desired value.