Pass ssl certificate options to anaconda

If a repository has `sslcacert`, `sslclientcert`, or `ssclientkey` set,
pass them to anaconda through the kickstart file. This is mostly the
case when using RHEL repositories that are accessed through a
subscription.

Resolves: rhbz#1701033

lorax-composer.spec

@@ -33,6 +33,7 @@ Requires: python-gevent
 Requires: anaconda-tui
 Requires: qemu-img
 Requires: tar
+Requires: pykickstart >= 1.99.66.20
 
 %{?systemd_requires}
 BuildRequires: systemd

src/pylorax/api/compose.py

@@ -121,6 +121,13 @@ def repo_to_ks(r, url="url"):
     if not r.sslverify:
         cmd += '--noverifyssl'
 
+    if r.sslcacert:
+        cmd += ' --sslcacert="%s"' % r.sslcacert
+    if r.sslclientcert:
+        cmd += ' --sslclientcert="%s"' % r.sslclientcert
+    if r.sslclientkey:
+        cmd += ' --sslclientkey="%s"' % r.sslclientkey
+
     return cmd