add self-signed certs for *.bosh-lite.com

[zrob]

this allows releases to be deployed using a known ca so they can do ssl with proper cert verification

Signed-off-by: Zach Robinson [email protected]

[cfdreddbot]

Hey zrob!

Thanks for submitting this pull request! I'm here to inform the recipients of the pull request that you and the commit authors have already signed the CLA.

[dpb587-pivotal]

I think this already should work when executing something like gobosh -e 192-168-50-4.sslip.io --user admin --password admin --ca-cert ca/certs/ca.crt ... - does this PR add something more than that?

[zrob]

This puts the ca into the default cert store for each "vm" that the director creates so that jobs in a deploy can trust each other using certs signed by that ca. Is the ca cert you reference available on all "vms" or is it just the director ca?

If it's available on every vm then it would work.

[zrob]

@dpb587-pivotal ping

[zrob]

@dpb587-pivotal ping

[cppforlife]

@zrob pipeline for bosh-lite is busted hence no update. it's not trivial to fix it so it's taking time.