disk-image-create fails to connect to Red Hat yum repositories

Issue

• disk-image-create fails to connect to Red Hat yum repositories with error message similar to this one:

2019-11-13 16:49:19.338 | > https://cdn.redhat.com/content/dist/rhel/server/7/7Server//openstack/13/os/repodata/repomd.xml: [Errno 14] curl#60 - "Peer's certificate issuer has been marked as not trusted by the user."
2019-11-13 16:49:19.338 | > Trying other mirror.
2019-11-13 16:49:19.338 | > It was impossible to connect to the Red Hat servers.
2019-11-13 16:49:19.338 | > This could mean a connectivity issue in your environment, such as the requirement to configure a proxy,
2019-11-13 16:49:19.338 | > or a transparent proxy that tampers with TLS security, or an incorrect system clock.
2019-11-13 16:49:19.338 | > Please collect information about the specific failure that occurs in your environment,
2019-11-13 16:49:19.338 | > using the instructions in: https://access.redhat.com/solutions/1527033 and open a ticket with Red Hat Support.
2019-11-13 16:49:19.338 | > 
2019-11-13 16:49:19.338 | > 
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >  One of the configured repositories failed (added from: https://cdn.redhat.com/content/dist/rhel/server/7/7Server//openstack/13/os),
2019-11-13 16:49:19.339 | >  and yum doesn't have enough cached data to continue. At this point the only
2019-11-13 16:49:19.339 | >  safe thing yum can do is fail. There are a few ways to work "fix" this:
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >      1. Contact the upstream for the repository and get them to fix the problem.
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >      2. Reconfigure the baseurl/etc. for the repository, to point to a working
2019-11-13 16:49:19.339 | >         upstream. This is most often useful if you are using a newer
2019-11-13 16:49:19.339 | >         distribution release than is supported by the repository (and the
2019-11-13 16:49:19.339 | >         packages for the previous distribution release still work).
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >      3. Run the command with the repository temporarily disabled
2019-11-13 16:49:19.339 | >             yum --disablerepo=cdn.redhat.com_content_dist_rhel_server_7_7Server_openstack_13_os ...
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >      4. Disable the repository permanently, so yum won't use it by default. Yum
2019-11-13 16:49:19.339 | >         will then just ignore the repository until you permanently enable it
2019-11-13 16:49:19.339 | >         again or use --enablerepo for temporary usage:
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >             yum-config-manager --disable cdn.redhat.com_content_dist_rhel_server_7_7Server_openstack_13_os
2019-11-13 16:49:19.339 | >         or
2019-11-13 16:49:19.339 | >             subscription-manager repos --disable=cdn.redhat.com_content_dist_rhel_server_7_7Server_openstack_13_os
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >      5. Configure the failing repository to be skipped, if it is unavailable.
2019-11-13 16:49:19.339 | >         Note that yum will try to contact the repo. when it runs most commands,
2019-11-13 16:49:19.339 | >         so will have to try and fail each time (and thus. yum will be be much
2019-11-13 16:49:19.339 | >         slower). If it is a very temporary problem though, this is often a nice
2019-11-13 16:49:19.339 | >         compromise:
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.339 | >             yum-config-manager --save --setopt=cdn.redhat.com_content_dist_rhel_server_7_7Server_openstack_13_os.skip_if_unavailable=true
2019-11-13 16:49:19.339 | > 
2019-11-13 16:49:19.388 | > failure: repodata/repomd.xml from cdn.redhat.com_content_dist_rhel_server_7_7Server_openstack_13_os: [Errno 256] No more mirrors to try.
2019-11-13 16:49:19.388 | > https://cdn.redhat.com/content/dist/rhel/server/7/7Server//openstack/13/os/repodata/repomd.xml: [Errno 14] curl#60 - "Peer's certificate issuer has been marked as not trusted by the user."

or this one:

2019-11-13 19:18:53.625 | Setting up Package Sacks
2019-11-13 19:18:53.905 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/extras/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:53.905 | Trying other mirror.
2019-11-13 19:18:53.905 | To address this issue please refer to the below knowledge base article
2019-11-13 19:18:53.905 | 
2019-11-13 19:18:53.905 | https://access.redhat.com/solutions/69319
2019-11-13 19:18:53.906 | 
2019-11-13 19:18:53.906 | If above article doesn't help to resolve this issue please open a ticket with Red Hat Support.
2019-11-13 19:18:53.906 | 
2019-11-13 19:18:54.026 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/openstack/13/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:54.026 | Trying other mirror.
2019-11-13 19:18:54.147 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/optional/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:54.147 | Trying other mirror.
2019-11-13 19:18:55.243 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/rh-common/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:55.243 | Trying other mirror.
2019-11-13 19:18:55.360 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/rhceph-tools/3/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:55.361 | Trying other mirror.
2019-11-13 19:18:55.486 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:55.486 | Trying other mirror.
2019-11-13 19:18:56.560 | https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/highavailability/os/repodata/repomd.xml: [Errno 14] HTTPS Error 403 - Forbidden
2019-11-13 19:18:56.561 | Trying other mirror.
2019-11-13 19:18:56.563 | Checking for virtual provide or file-provide for iscsi-initiator-utils