Description of problem:

Problem with certificates when accessing pulp repo

# yum info penguin
https://hp-dl580g7-02.xxx.com/pulp/repos/ACME_Corporation/testing/custom/product/repo/repodata/repomd.xml:
[Errno 14] PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
Trying other mirror.


REPRODUCER SCRIPT:

#!/bin/bash
K="katello -u admin -p admin"
URL=http://lzap.fedorapeople.org/fakerepos/zoo4
export LC_ALL=en_US

# sync zoo
$K client remember --option org --value ACME_Corporation
$K provider create --name provider --url $URL
$K product create --provider provider --name product --url $URL --nodisc
$K repo create --product product --name repo --url $URL
$K repo synchronize --product product --name repo

# promote zoo
$K environment create --name testing --prior Locker
$K changeset create --name change --environment testing
$K changeset update --name change --environment testing --add_product product
$K changeset promote --name change --environment testing

# configure rhsm
sed -i "s/^hostname\s*=.*/hostname = $(hostname)/g" /etc/rhsm/rhsm.conf
sed -i 's/^prefix\s*=.*/prefix = \/katello\/api/g' /etc/rhsm/rhsm.conf
sed -i 's/^port\s*=.*/port = 443/g' /etc/rhsm/rhsm.conf
sed -i 's/^repo_ca_cert\s*=.*/repo_ca_cert = %(ca_cert_dir)scandlepin-ca.crt/g' /etc/rhsm/rhsm.conf
sed -i "s/^baseurl\s*=.*/baseurl=https:\/\/$(hostname)\/pulp\/repos\//g" /etc/rhsm/rhsm.conf
openssl x509 -outform pem -in /etc/candlepin/certs/candlepin-ca.crt -out /etc/rhsm/ca/candlepin-ca.pem

# self register and subscribe
POOLID=$(sudo subscription-manager list --available --all | grep PoolId | head -n1 | awk '{print $2}') # grab first pool
subscription-manager register --username=admin --password=admin --force --org=ACME_Corporation --environment=testing
subscription-manager subscribe --pool

yum info penguin