Pass ssl certificate options to anaconda

If a repository has `sslcacert`, `sslclientcert`, or `ssclientkey` set,
pass them to anaconda through the kickstart file. This is mostly the
case when using RHEL repositories that are accessed through a
subscription.

(cherry picked from commit e194b5926c)

Resolves: rhbz#1663950

lorax.spec

@@ -48,7 +48,7 @@ Requires:       kpartx
 # Python modules
 Requires:       libselinux-python3
 Requires:       python3-mako
-Requires:       python3-kickstart
+Requires:       python3-kickstart >= 3.16.4
 Requires:       python3-dnf >= 3.2.0
 Requires:       python3-librepo
 

src/pylorax/api/compose.py

@@ -115,6 +115,13 @@ def repo_to_ks(r, url="url"):
     if not r.sslverify:
         cmd += '--noverifyssl'
 
+    if r.sslcacert:
+        cmd += ' --sslcacert="%s"' % r.sslcacert
+    if r.sslclientcert:
+        cmd += ' --sslclientcert="%s"' % r.sslclientcert
+    if r.sslclientkey:
+        cmd += ' --sslclientkey="%s"' % r.sslclientkey
+
     return cmd