HTTPS Certificate documentation is old and badly wrong

[Jesse Pretorius]

The current documentation about how to configure SSL certificates [1] is pre-newton and badly wrong. It needs a refresh.

All public endpoints are behind haproxy, so the only certificate management most environments need are those for haproxy.

The variables to set to provide the path on the deployment node to the certificates are:
haproxy_user_ssl_cert, haproxy_user_ssl_key, haproxy_user_ssl_ca_cert

[1] https://docs.openstack.org/project-deploy-guide/openstack-ansible/ocata/app-advanced-config-sslcertificates.html

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/485371

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/485371
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible/commit/?id=af5c873af48054ae620d7a009e680894298661f6
Submitter: Jenkins
Branch: master

commit af5c873af48054ae620d7a009e680894298661f6
Author: Amy Marrich (spotz) <email address hidden>
Date: Wed Jul 19 17:42:37 2017 -0500

    [DOCS] Update of SSL Config to include HAProxy

    Updated instructions to stress HAProxy configuration for SSL

    Change-Id: I091e491f50c6d40ae155a3fb9991fc7766717ff2
    Closes-Bug: #1704770

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/ocata
Review: https://review.openstack.org/487753

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/newton
Review: https://review.openstack.org/487755

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible 16.0.0.0b3 development milestone.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/487753
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible/commit/?id=5adfb71e7877bce02ad483064f7c10d152a83abe
Submitter: Jenkins
Branch: stable/ocata

commit 5adfb71e7877bce02ad483064f7c10d152a83abe
Author: Amy Marrich (spotz) <email address hidden>
Date: Wed Jul 19 17:42:37 2017 -0500

    [DOCS] Update of SSL Config to include HAProxy

    Updated instructions to stress HAProxy configuration for SSL

    Change-Id: I091e491f50c6d40ae155a3fb9991fc7766717ff2
    Closes-Bug: #1704770
    (cherry picked from commit af5c873af48054ae620d7a009e680894298661f6)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/487755
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible/commit/?id=ee024b7e9e07059d50b1a0e20c4fb4e84663f01d
Submitter: Jenkins
Branch: stable/newton

commit ee024b7e9e07059d50b1a0e20c4fb4e84663f01d
Author: Amy Marrich (spotz) <email address hidden>
Date: Wed Jul 19 17:42:37 2017 -0500

    [DOCS] Update of SSL Config to include HAProxy

    Updated instructions to stress HAProxy configuration for SSL

    Change-Id: I091e491f50c6d40ae155a3fb9991fc7766717ff2
    Closes-Bug: #1704770
    (cherry picked from commit af5c873af48054ae620d7a009e680894298661f6)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible 15.1.8 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible 14.2.8 release.