Certificate verify failed after enabling the force_https option in astute

[Ilya Bumarskov]

Fuel 10 build# 1501

Steps to reproduce:
On master node:
echo -e '"SSL":\n "force_https": "true"' >> /etc/fuel/astute.yaml
puppet apply /etc/puppet/newton-10.0/modules/fuel/examples/nginx_services.pp
systemctl restart nailgun

Then try to execute any cli command:
[root@nailgun ~]# fuel2 release list
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)

[Stanislaw Bogatkin (sbogatkin)]

I suppose that in our case there is much easier to add this certificate to trusted as we do for slave nodes. So, in test we need to place it in /etc/pki/ca-trust/source/anchors/<cert_name>.pem, then run "update-ca-trust force-enable" and then "update-ca-certificates". After this test should pass.

[Ilya Bumarskov (ibumarskov)]

https://review.openstack.org/#/c/455153/

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/455153
Committed: https://git.openstack.org/cgit/openstack/fuel-qa/commit/?id=919a54074ee3040000b5c22a0bb35ccd3c1ae228
Submitter: Jenkins
Branch: stable/newton

commit 919a54074ee3040000b5c22a0bb35ccd3c1ae228
Author: ibumarskov <email address hidden>
Date: Mon Apr 10 12:19:15 2017 +0400

    Add nginx.crt to trusted certificates

    Change-Id: I30c15b52cc42a43d9c4003afed390885a480c212
    Closes-bug: #1675701

[Vladimir Khlyunev (vkhlyunev)]

Tests was fixed after several re-runs of acceptance at 1575 build