private static void init() {

		if (wrappedTrustManagers == null) {
			wrappedTrustManagers = new WrappedTrustManager[] { new WrappedTrustManager() };
		}

		String cacertsPath = System.getProperty(GHIDRA_CACERTS_PATH_PROPERTY);
		if (cacertsPath == null || cacertsPath.length() == 0) {
			// check user preferences if cacerts not set via system property
			cacertsPath = Preferences.getProperty(GHIDRA_CACERTS_PATH_PROPERTY);
			if (cacertsPath == null || cacertsPath.length() == 0) {
				Msg.info(ApplicationTrustManagerFactory.class,
					"Trust manager disabled, cacerts have not been set");
				trustManager = new OpenTrustManager();
				return;
			}
		}

		try {
			Msg.info(ApplicationTrustManagerFactory.class,
				"Trust manager initializing with cacerts: " + cacertsPath);
			KeyStore keyStore = ApplicationKeyStore.getCertificateStoreInstance(cacertsPath);
			TrustManagerFactory tmf =
				TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
			tmf.init(keyStore);
			TrustManager[] trustManagers = tmf.getTrustManagers();
			for (TrustManager trustManager2 : trustManagers) {
				if (trustManager2 instanceof X509TrustManager) {
					X509TrustManager mgr = (X509TrustManager) trustManager2;
					ApplicationKeyStore.logCerts(mgr.getAcceptedIssuers());
					trustManager = mgr;
					break;
				}
			}
			hasCAs = true;
		}
		catch (GeneralSecurityException | IOException e) {
			caError = e;
			String msg = e.getMessage();
			if (msg == null) {
				msg = e.toString();
			}
			Msg.error(ApplicationTrustManagerFactory.class,
				"Failed to process cacerts (" + cacertsPath + "): " + msg, e);
		}
	}
Initialize trustManagers if <i>ghidra.cacerts</i> property or preference was specified, 
otherwise an "open" trust manager will be established.  If an error occurs processing
a specified cacerts file, a "closed" trust policy will be adopted.
Ghidra/Framework/Generic/src/main/java/ghidra/net/ApplicationTrustManagerFactory.java