As discussed in https://github.com/crowbar/barclamp-keystone/commit/23c5c65fdcb52a8317a57fd5e1fc8da478d7bb3e#commitcomment-3565265, glance doesn't have this config value. it's automatically CERT_REQUIRED if ca_file is specified. I'll try to address this upstream though