@ekohl, it seems it is handled by this patch properly https://github.com/theforeman/puppet-foreman/commit/58f191122b07a4684f4200eea6a9ea7bd6af8f79
My hammer reports:
[DEBUG 2018-01-10 10:40:26 SSLoptions] SSL options: {
:ssl_ca_file => "/etc/pki/katello/certs/katello-default-ca.crt",
:verify_ssl => true
}
which seems correct. It is clean Katelo 3.5.0.
The config is here:
# cat /etc/hammer/cli.modules.d/foreman.yml
:foreman:
# Enable/disable foreman commands
:enable_module: true
# Your foreman server address
:host: 'https://centos7-katello-3-5.pichi.example.com'
:ssl:
:ssl_ca_file: '/etc/pki/katello/certs/katello-default-ca.crt'