catching the NPE, but is there the potential for anything else here?  connection, certificate, etc exceptions?  Not familiar with the internals, but I'd assume SSL would throw more than just the NPE?  Could this leave a gap if we throw before we close?  should closes be in finally blocks?