code: private void initializeSecurity() {
      _allowHTTPS = Boolean.parseBoolean(_config.getString("allowHTTPS", "false"));
      _truststoreType = _config.getString("truststoreType", KeyStore.getDefaultType());
      
      String defaultTruststore = System.getProperty("javax.net.ssl.trustStore");
      String defaultTruststorePassword = System.getProperty("javax.net.ssl.trustStorePassword");
      
      _truststoreFilename = _config.getString("truststoreFilename", defaultTruststore);
      _truststorePassword = _config.getString("truststorePassword", defaultTruststorePassword);
      
      if (_truststoreFilename != null && _truststoreFilename.isEmpty())
        _truststoreFilename = null;
      if (_truststorePassword != null && _truststorePassword.isEmpty())
        _truststorePassword = null;
  
      
    }
docs: The initializeSecurity method will setup the necessary values from either the config file
  or the system properties (so you can override the config file with the -D switch I guess).
  None of this is actually used unless the "allowHTTPS" flag is set to true in the config file.