X-pack failed to initialize a TrustManagerFactory
I posted this question to Elsticsearch forum as well and got the answer to my problem there:
Elasticsearch runs under a security manager with a restricted set of directories that can be read. The key files and certificates should be stored in the config directory and could be placed in a sub directory there if desired