explicitly set the trust store password, seems the newer versions httpcomponents otherwise uses an empty string (instead of the defacto "changeit")