Fix invalid cert for Instance Console
scp root@controller:/etc/pki/tls/certs/ssl_ps_server.crt .
scp -r root@controller:/etc/pki/tls/private/ssl_ps_server.key .
scp -r root@controller:/etc/pki/tls/certs/ssl_ps_chain.crt .
openssl pkcs12 -export -out openstack.p12 -inkey ssl_ps_server.key -in ssl_ps_server.crt -certfile ssl_ps_chain.crt
This will spit out a openstack.p12 file which can be imported and trusted in firefox.