Fix OpenSSL installation

Make SSL python script to work with python3, and add become
to install packages.
Change-Id: I854a02ab76ee7f273d8f4592a3d3dfe1d7dcdf53

roles/overcloud-ssl/library/tls_tht.py

@@ -115,7 +115,7 @@ def create_anchor_file(cert_ca_pem, source_dir, dest_dir, enable_tls_overcloud,
     # Optionally include the undercloud's local CA certificate
     try:
         undercloud_ca = "/etc/pki/ca-trust/source/anchors/cm-local-ca.pem"
-        with open(undercloud_ca, 'ro') as undercloud_ca_file:
+        with open(undercloud_ca, 'r') as undercloud_ca_file:
             undercloud_ca_content = undercloud_ca_file.read()
         ca_map.update({"undercloud-ca": {"content": undercloud_ca_content}})
     except IOError:

roles/overcloud-ssl/tasks/main.yml

@@ -2,15 +2,13 @@
 # tasks file for ansible-role-tripleo-ssl
 - when: ssl_overcloud|bool
   block:
-    - name: Ensure rpm requirements for ssl are installed
-      yum: name={{ item }} state=latest
-      with_items:
-        - openssl
-
-    - name: Ensure tripleo heat template rpm requirements for ssl are installed
-      yum: name={{ item }} state=latest
-      with_items:
-        - openstack-tripleo-heat-templates
+    - name: Ensure rpm requirements for ssl and heat template are installed
+      become: true
+      package:
+        name:
+          - openssl
+          - openstack-tripleo-heat-templates
+        state: latest
 
     - name: Create overcloud-create-ssl-cert.sh
       template: