From 18eb05565e8a6a45e5ec99039a6e74bdfe607d26 Mon Sep 17 00:00:00 2001
From: Mike Fedosin <mikhail.fedosin.ext@nokia.com>
Date: Mon, 2 Oct 2017 15:32:59 +0300
Subject: [PATCH] Allow to work in secure mode without certificate

If we are not working in insecure mode and certificate not
supplied we should work still in secured mode, because secure
mode can work even without certificate supplied (loaded to ca-store)

Change-Id: If3471fc8621a774a1f752cd6b84509e7128b0146
Closes-bug: #1720783
(cherry picked from commit c9f70bd2c2afe38849487afdefa08d8691a1d443)
---
 glareclient/common/keycloak_auth.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/glareclient/common/keycloak_auth.py b/glareclient/common/keycloak_auth.py
index 7cd801f..432ad93 100644
--- a/glareclient/common/keycloak_auth.py
+++ b/glareclient/common/keycloak_auth.py
@@ -65,7 +65,7 @@ def authenticate(**kwargs):
 
     verify = None
     if urllib.parse.urlparse(access_token_endpoint).scheme == "https":
-        verify = False if insecure else cacert
+        verify = False if insecure else cacert if cacert else True
 
     body = {
         'grant_type': 'password',