The broker configuration file (config.xml) needs to be updated to include the SSL keystore location details.

<!-- Additions required to Connector Section -->

<ssl>
    <enabled>true</enabled>
    <sslOnly>true</sslOnly>
    <keystorePath>/path/to/keystore.ks</keystorePath>
    <keystorePassword>keystorepass</keystorePassword>
</ssl>

The sslOnly option is included here for completeness however this will disable the unencrypted port and leave only the SSL port listening for connections.

The best place to start looking is class SSLConfiguration this is provided to the connection during creation however there is currently no example that demonstrates its use.