Create ssl certificate for undercloud
If you do not have a trusted CA signed certificate file, you can alternatively generate a self-signed certificate file using the following command: openssl genrsa -out privkey.pem 2048 The next command will prompt for some identification details. Most of these don’t matter, but make sure the Common Name entered matches the value of undercloud_public_vip in undercloud.conf: openssl req -new -x509 -key privkey.pem -out cacert.pem -days 365 Combine the two files into one for HAProxy to use. The order of the files in this command matters, so do not change it: cat cacert.pem privkey.pem > undercloud.pem