utilities for configuring httpclient, especially for ssl certificates without clumsy java keystores