title: OpenStack CLI Failed SSL Verification
body: <p>When executing an openstack command, it is failing to verify a certificate that was signed by an internal CA.</p>
  
  <pre><code>CentOS 7
  Root CA installed in /etc/pki/ca-trust/source/anchors
  openstack 3.3.0
  </code></pre>
  
  <p>$ openstack server list<br>
  Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL. SSL exception connecting to <a href="https://XXXXX" rel="nofollow">https://XXXXX</a> :13000/v2.0/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765)</p>
  
  <p>I hit the url from a browser and downloaded the certificate. Then ran openssl verify successfully.</p>
  
  <blockquote>
    <p>$ openssl verify -CAfile /etc/ssl/certs/ca-bundle.trust.crt 10.92.50.11.crt<br>
    10.92.50.11.crt: OK</p>
  </blockquote>
  
  <p>Does the root CA need to be placed in another area for the command line to pick it up?</p>