[14.1.X] Add certificates handling to Tier0Handler

[JanChyczynski]

PR description:

This PR adds providing certificates for curl requests done to https://cmsweb.cern.ch/t0wmadatasvc/prod/.
The paths to the certificate and the key are meant to be specified in X509_USER_CERT and X509_USER_KEY.

The certs became obligatory for accessing this API after migration of cmsweb from CC7 and this functionality is required by the conddb command and some O2Os (EcalLaser_prompt_run3, SiStripDetVOff_prompt, possibly also EcalLaser_prompt_hlt, ESGain_prompt, SIntercalibConstants_prompt, SRecHitRatioCuts_prompt, STimeSampleWeights_prompt)

The PR also introduces a way of overriding the hardcoded T0 API URL by setting the TIER0_API_URL env variable (eg. for test purposes).

PR validation:

Tested by running python3 tier0.py which is running the test for it.

Backport

This is the backport to CMSSW_14_1_X of the main PR: #45779

FYI @perrotta @francescobrivio @PonIlya

[cmsbuild]

A new Pull Request was created by @JanChyczynski for CMSSW_14_1_X.

It involves the following packages:

• CondCore/Utilities (db)

@cmsbuild, @consuegs, @francescobrivio, @perrotta, @saumyaphor4252 can you please review it and eventually sign? Thanks.
@JanChyczynski, @PonIlya, @mmusich, @rsreds, @yuanchao this is something you requested to watch as well.
@antoniovilela, @mandrenguyen, @rappoccio, @sextonkennedy you are the release manager for this.

cms-bot commands are listed here

• Backported from Add certificates handling to Tier0Handler #45779

[cmsbuild]

cms-bot internal usage

[perrotta]

backport of #45779

[perrotta]

please test

[cmsbuild]

+1

Size: This PR adds an extra 12KB to repository
Summary: https://cmssdt.cern.ch/SDT/jenkins-artifacts/pull-request-integration/PR-5cabdc/41189/summary.html
COMMIT: 3fa2860
CMSSW: CMSSW_14_1_X_2024-08-28-2300/el8_amd64_gcc12
User test area: For local testing, you can use /cvmfs/cms-ci.cern.ch/week0/cms-sw/cmssw/45824/41189/install.sh to create a dev area with all the needed externals and cmssw changes.

Comparison Summary

Summary:

• You potentially removed 3 lines from the logs
• Reco comparison results: 8 differences found in the comparisons
• DQMHistoTests: Total files compared: 44
• DQMHistoTests: Total histograms compared: 3328202
• DQMHistoTests: Total failures: 6
• DQMHistoTests: Total nulls: 0
• DQMHistoTests: Total successes: 3328176
• DQMHistoTests: Total skipped: 20
• DQMHistoTests: Total Missing objects: 0
• DQMHistoSizes: Histogram memory added: 0.0 KiB( 43 files compared)
• Checked 191 log files, 161 edm output root files, 44 DQM output files
• TriggerResults: no differences found

[JanChyczynski]

@perrotta @mandrenguyen Can you take a look and sign? I ping you mandrenguyen 'cause you've signed the main PR so maybe you can sign the backport too

[perrotta]

+db

[cmsbuild]

This pull request is fully signed and it will be integrated in one of the next CMSSW_14_1_X IBs (tests are also fine) and once validation in the development release cycle CMSSW_14_2_X is complete. This pull request will now be reviewed by the release team before it's merged. @sextonkennedy, @rappoccio, @mandrenguyen, @antoniovilela (and backports should be raised in the release meeting by the corresponding L2)

[mandrenguyen]

+1