Reuse the Foreman client SSL settings for Candlepin
Foreman has a setting :ssl_ca_file which is described as:
SSL CA file that Foreman will use to communicate with its proxies
In practice Candlepin is almost always the same CA. To reduce the required configuration, it would be good if Katello would fall back to the shared config.
This may require changes to the description in Foreman.