lack of secure client connection

[Hua Zhang]

After setting up an SSL env with the following command

./generate-bundle.sh -s xenial -r queens --create-model --name ssl:stsstack --num-compute 1 --ssl --nova-console --run

then we can run 'REQUESTS_CA_BUNDLE=/home/ubuntu/stsstack-bundles/openstack/ssl/openstack-ssl/results/cacert.pem openstack server list' and 'openstack --insecure server list', but we can't run 'openstack server list' directly.

$ REQUESTS_CA_BUNDLE=/home/ubuntu/stsstack-bundles/openstack/ssl/openstack-ssl/results/cacert.pem openstack server list

$ openstack --insecure server list

$ openstack server list
Failed to discover available identity versions when contacting https://10.5.100.2:5000/v3. Attempting to parse version from URL.
SSL exception connecting to https://10.5.100.2:5000/v3/auth/tokens: HTTPSConnectionPool(host='10.5.100.2', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')])")))