Comment 2 for bug 1807233

Three things to fix:

The ssl = True and ssl_ca_file = $PATH_TO_CERT settings were not being rendered in [oslo_messaging_rabbit]. This will be fixed in charm-layer-openstack.

NOTE: transport_rul MUST be in the [DEFAULT] section. That is still correct.

And the certificate was not being created from the rabbitmq interface. This will be fixed in charm-neutron-dyanmic-routing with a call to configure_ssl().

However, all the SSL configuration happens in the charms.openstack HAOpenStackCharm class but neutron-dynamic-routing is simply a principle charm (Non-HA-API) and uses the OpenStackCharm class. The ssl configuration methods need to be moved into the OpenStackCharm class in charms.openstack.

These are in progress being tested now.