When deploying broker using operator with SSL disabled on acceptor route doesn't have (for obvious reasons) enabled TLS with "pass through" handling. When updating CR by `oc apply -f` command to enable SSL on this existing deployment, the route is not updated (at least not in interval of ~ 2 minutes) and SSL part of communication is handled by OpenShift's certificate, which causes SSL handshake to fail.