Add "ssl_ca_file" in config for self-signed certs

README.md

@@ -98,6 +98,7 @@ This provider exposes quite a few provider-specific configuration options:
 * `openstack_image_url` - The image URL to hit. This is good for custom endpoints. If not provided, vagrant will try to get it from catalog endpoint.
 * `endpoint_type` - The endpoint type to use : publicURL, adminURL, internalURL. If not provided, vagrant will use publicURL by default.
 * `interface_type` - The endpoint type to use for identity v3: public, admin, internal. If not provided, vagrant will use public by default.
+* `ssl_ca_file` - The location of CA certificate file.
 * `ssl_verify_peer` - Verify peer certificate when connecting to endpoint. Defaults to true. Set to false to disable check (beware this is not secure!)
 
 ### VM Configuration

source/.rubocop.yml

@@ -25,7 +25,7 @@ Metrics/CyclomaticComplexity:
   Max: 15
 
 Metrics/MethodLength:
-  Max: 60
+  Max: 65
 
 Metrics/LineLength:
   Max: 150

source/lib/vagrant-openstack-provider/client/rest_utils.rb

@@ -7,21 +7,21 @@ def self.get(env, url, headers = {}, &block)
         config = env[:machine].provider_config
         RestClient::Request.execute(method: :get, url: url, headers: headers,
                                     timeout: config.http.read_timeout, open_timeout: config.http.open_timeout,
-                                    verify_ssl: config.ssl_verify_peer, &block)
+                                    ssl_ca_file: config.ssl_ca_file, verify_ssl: config.ssl_verify_peer, &block)
       end
 
       def self.post(env, url, payload, headers = {}, &block)
         config = env[:machine].provider_config
         RestClient::Request.execute(method: :post, url: url, payload: payload, headers: headers,
                                     timeout: config.http.read_timeout, open_timeout: config.http.open_timeout,
-                                    verify_ssl: config.ssl_verify_peer, &block)
+                                    ssl_ca_file: config.ssl_ca_file, verify_ssl: config.ssl_verify_peer, &block)
       end
 
       def self.delete(env, url, headers = {}, &block)
         config = env[:machine].provider_config
         RestClient::Request.execute(method: :delete, url: url, headers: headers,
                                     timeout: config.http.read_timeout, open_timeout: config.http.open_timeout,
-                                    verify_ssl: config.ssl_verify_peer, &block)
+                                    ssl_ca_file: config.ssl_ca_file, verify_ssl: config.ssl_verify_peer, &block)
       end
     end
   end

source/lib/vagrant-openstack-provider/config.rb

@@ -243,6 +243,11 @@ class Config < Vagrant.plugin('2', :config)
       # @return [Boolean]
       attr_accessor :use_legacy_synced_folders
 
+      # Specify the certificate to use.
+      #
+      # @return [String]
+      attr_accessor :ssl_ca_file
+
       # Verify ssl peer certificate when connecting. Set to false (! unsecure) to disable
       #
       # @return [Boolean]
@@ -295,6 +300,7 @@ def initialize
         @meta_args_support = UNSET_VALUE
         @http = HttpConfig.new
         @use_legacy_synced_folders = UNSET_VALUE
+        @ssl_ca_file = UNSET_VALUE
         @ssl_verify_peer = UNSET_VALUE
       end
 
@@ -407,6 +413,7 @@ def finalize!
         @volumes = nil if @volumes.empty?
         @stacks = nil if @stacks.empty?
         @http.finalize!
+        @ssl_ca_file = nil if @ssl_ca_file == UNSET_VALUE
         @ssl_verify_peer = true if @ssl_verify_peer == UNSET_VALUE
       end
       # rubocop:enable Metrics/CyclomaticComplexity,Metrics/PerceivedComplexity

source/spec/vagrant-openstack-provider/client/cinder_spec.rb

@@ -11,6 +11,7 @@
   let(:config) do
     double('config').tap do |config|
       config.stub(:http) { http }
+      config.stub(:ssl_ca_file) { nil }
       config.stub(:ssl_verify_peer) { true }
     end
   end

source/spec/vagrant-openstack-provider/client/glance_spec.rb

@@ -11,6 +11,7 @@
   let(:config) do
     double('config').tap do |config|
       config.stub(:http) { http }
+      config.stub(:ssl_ca_file) { nil }
       config.stub(:ssl_verify_peer) { true }
     end
   end

source/spec/vagrant-openstack-provider/client/heat_spec.rb

@@ -18,6 +18,7 @@
       config.stub(:username) { 'username' }
       config.stub(:password) { 'password' }
       config.stub(:http) { http }
+      config.stub(:ssl_ca_file) { nil }
       config.stub(:ssl_verify_peer) { true }
     end
   end

source/spec/vagrant-openstack-provider/client/keystone_spec.rb

@@ -20,6 +20,7 @@
       config.stub(:interface_type) { 'public' }
       config.stub(:identity_api_version) { '2' }
       config.stub(:project_name) { 'testTenant' }
+      config.stub(:ssl_ca_file) { nil }
       config.stub(:ssl_verify_peer) { true }
     end
   end

source/spec/vagrant-openstack-provider/client/neutron_spec.rb

@@ -11,6 +11,7 @@
   let(:config) do
     double('config').tap do |config|
       config.stub(:http) { http }
+      config.stub(:ssl_ca_file) { nil }
       config.stub(:ssl_verify_peer) { true }
     end
   end

source/spec/vagrant-openstack-provider/client/nova_spec.rb

@@ -21,6 +21,7 @@
       config.stub(:username) { 'username' }
       config.stub(:password) { 'password' }
       config.stub(:http) { http }
+      config.stub(:ssl_ca_file) { nil }
       config.stub(:ssl_verify_peer) { true }
     end
   end

source/spec/vagrant-openstack-provider/config_spec.rb

@@ -29,6 +29,7 @@
     its(:security_groups) { should be_nil }
     its(:user_data) { should be_nil }
     its(:metadata) { should be_nil }
+    its(:ssl_ca_file) { should eq nil }
   end
 
   describe 'overriding defaults' do
@@ -50,7 +51,8 @@
       :user_data,
       :metadata,
       :availability_zone,
-      :public_key_path].each do |attribute|
+      :public_key_path,
+      :ssl_ca_file].each do |attribute|
       it "should not default #{attribute} if overridden" do
         subject.send("#{attribute}=".to_sym, 'foo')
         subject.finalize!