Currently, "trusted_ssl_ca" is only effective when there's only one certificate in it. If a combined certificate is set in "trusted_ssl_ca", the certificates' symbolic links will not be properly created in "/etc/ssl/certs" because `update-ca-certificates` [0] does not support more than one certificates (see man page of `update-ca-certificates`). However, the symbolic links are important to `check_ssl_cert` in verifying the certificates chain.
We need supports for setting multiple certificates in "trusted_ssl_ca". For example, the charm code should be able to split the combined certificates input into multiple files containing single certificates.
Currently, "trusted_ssl_ca" is only effective when there's only one certificate in it. If a combined certificate is set in "trusted_ssl_ca", the certificates' symbolic links will not be properly created in "/etc/ssl/certs" because `update- ca-certificates ` [0] does not support more than one certificates (see man page of `update- ca-certificates `). However, the symbolic links are important to `check_ssl_cert` in verifying the certificates chain.
We need supports for setting multiple certificates in "trusted_ssl_ca". For example, the charm code should be able to split the combined certificates input into multiple files containing single certificates.
[0] https:/ /git.launchpad. net/charm- openstack- service- checks/ tree/src/ reactive/ openstack_ service_ checks. py#n207