retrace: add again fedora-messaging configs

this has been added in 4d1bcd1802 but later lost when rebased to latest upstream role

playbooks/groups/retrace.yml

@@ -119,5 +119,8 @@
         rs_faf_link_dir: /srv/retrace/hardlink-local
         hostname: retrace.fedoraproject.org
         faf_spool_dir: /srv/faf
+        faf_fedmsg_ca_cert: /etc/fedora-messaging/faf/ca.crt
+        faf_fedmsg_keyfile: /etc/fedora-messaging/faf/faf.key
+        faf_fedmsg_certfile: /etc/fedora-messaging/faf/faf.crt
       when: datacenter == "aws"
     - import_role: name=abrt/retrace-post

roles/abrt/faf-pre/tasks/main.yml

@@ -17,6 +17,30 @@
     owner: faf
     group: faf
 
+- name: create folders where we place certs for fedora-messaging
+  file: path=/etc/fedora-messaging/faf owner=root group=root mode=0755 state=directory
+
+- name: install certs for fedora-messaging
+  copy: src={{ item.src }}
+        dest=/etc/fedora-messaging/faf/{{ item.dest }}
+        owner={{ item.owner }} group=root mode={{ item.mode }}
+  loop:
+    - { src: "{{private}}/files/rabbitmq/{{env}}/pki/ca.crt",
+        dest: "ca.crt",
+        owner: faf,
+        mode: 0644
+      }
+    - { src: "{{private}}/files/rabbitmq/{{env}}/pki/private/faf.key",
+        dest: "faf.key",
+        owner: faf,
+        mode: "600"
+      }
+    - { src: "{{private}}/files/rabbitmq/{{env}}/pki/issued/faf.crt",
+        dest: "faf.crt",
+        owner: faf,
+        mode: 0644
+      }
+
 # landing page
 - name: install abrt-server-info-page
   package: