added CA_CERTIFICATES_PATH configuration option to specify trusted root certificates.
ssl: trust our own server certificate
README: cleanup