1 way SSL authentication support process

Hi , 

Could you please let me know detailed information about 1-way SSL authentication process supported by Lithium ?

Our lithium community sites are configured with SSL certificates. We are planning to pull the content from our lithium community sites and display it on other internal sites using the authorization grant flow via a back-end API call & subsequent request for data retrieval.

We will be using REST API calls to pull the data and we will be using HTTPS for the requests. Lithium confirmed that platform supports 1-way SSL authentication only.

Here are my queries :

1. We will be calling lithium using back end jobs (using REST API , not from browser) for pulling the data. So when this call triggered , how the authentication process (SSL hand shake) happens ?
2. As per 1-way SSL authentication process ,client should be (our application) storing the trust store to validate certificate from server (lithium in this case),  so who will be providing this trust store ?

your earliest response on this will be highly appriciated.

Thanks,

Hari