Let's Encrypt while upgrading nodes

[SebastienGardoll]

Describe the bug

When trying to upgrade from 4.04 to devel or 4.05, with Let's Encrypt on.

`TASK [tomcat : Create Keystore] **************************************************************************************************************************************************************
fatal: [vesgint-idx.ipsl.upmc.fr]: FAILED! => {
"changed": false,
"cmd": "/usr/bin/openssl pkcs12 -export -name my_esgf_node -in /tmp/my_esgf_node.crt -inkey /tmp/my_esgf_node.key -out /tmp/keystore.p12 -passout '********'",
"rc": 1
}

STDERR:

No certificate matches private key

MSG:

No certificate matches private key

fatal: [vesgint-data.ipsl.upmc.fr]: FAILED! => {
"changed": false,
"cmd": "/usr/bin/openssl pkcs12 -export -name my_esgf_node -in /tmp/my_esgf_node.crt -inkey /tmp/my_esgf_node.key -out /tmp/keystore.p12 -passout '********'",
"rc": 1
}

STDERR:

No certificate matches private key

MSG:

No certificate matches private key`

Full log: 6_upgrade_int_to_devel_lets.log

To Reproduce

ansible-playbook -i hosts.int -u root install.yml

idx&idp config:

`ansible_user: root

globushostcert: /root/certs/local_certs/hostcert.pem
globushostkey: /root/certs/local_certs/hostkey.pem

myproxycacert: /root/certs/local_certs/cacert.pem
myproxycakey: /root/certs/local_certs/cakey.pem
myproxy_signing_policy: /root/certs/local_certs/globus_simple_ca_47671b99_setup-0/47671b99.signing_policy

try_letsencrypt: true

globus_user: [NOT SHOWN]
globus_pass: [NOT SHOWN]
register_gridftp: false
register_myproxy: false

configure_centos6_iptables: false
configure_centos7_firewalld: false

mirror_host: distrib-coffee.ipsl.jussieu.fr/pub`

data config:

`ansible_user: root

globushostcert: /root/certs/local_certs/hostcert.pem
globushostkey: /root/certs/local_certs/hostkey.pem

try_letsencrypt: true

globus_user: [NOT SHOWN]
globus_pass: [NOT SHOWN]
register_gridftp: false
register_myproxy: false

configure_centos6_iptables: false
configure_centos7_firewalld: false

mirror_host: distrib-coffee.ipsl.jussieu.fr/pub`

Expected behavior

Installation to complete and working Let's Encrypt certificats and idx and data nodes.

ESGF Node (please complete the following information):

• Managed OS: Up to date CentOS 7
• Host OS: Up to date CentOS 7
• esgf-ansible Version: 4.04
• Node type: idx, idp and data