Comment 0 for bug 1840899

The TLS configuration helpers are a property of the ``OpenStackCharm`` class which is appropriate and make them available to non-API OpenStack services such as ``ceilometer`` as well as not strictly speaking OpenStack services such as ``rabbitmq``.

However, they were originally in the ``OpenStackAPICharm`` class and later moved [0], and unfortunately the helpers carried over assumptions about placement of certificate files.

I think the move was appropriate but the helpers could have been adapted to their new home by providing configurability of certificate placement in the ``OpenStackCharm`` helper and then overriding that to the present defaults in the inherited helper in ``OpenStackAPICharm``.