tree 6226ccb7655ef26916b42f0f4f5b7fe91fb790ba
parent 319abcaf85791961baaed0019fa67c79c26047e0
author Daniel P. Berrange <berrange@redhat.com> 1479129794 +0000
committer Daniel P. Berrange <berrange@redhat.com> 1479209044 +0000

Move certificate setup earlier in deployment

Currently the x509 certificate setup is done after all the
openstack services have been deployed. This is OK because
none of the services require that the x509 certs exist
when they are being deployed. With the integration of TLS
into the nova novnc proxy (and later spice & serial proxy)
service, x509 certs will need to exist before Nova is
deployed.

The CA setup must thus be moved earlier in the devstack
deployment flow, prior to the setup of any services. One
part of the CA setup, however, fixes up the global cert
bundle locations and this can only be done after the
python requests module is install, thus must remain in
its current location.

Change-Id: Idcd264fb73bb88dc2f4280c53c013dfe4364afff