If you choose to use the ePO server's credentials at install time, then the AH effectively copies the db.properties from the ePO server and uses that - so it will use the same SSL settings as the server. However I do not believe this is dynamic: if you change it on the ePO server it will not be reflected on the AH. You would need to manually edit the AH's db.properties file and restart the service for the change to take effect.
As always, sir - you are a star. Many thanks!