diff --git a/coriolisclient/cli/shell.py b/coriolisclient/cli/shell.py
index f871327..1e5c44a 100644
--- a/coriolisclient/cli/shell.py
+++ b/coriolisclient/cli/shell.py
@@ -148,7 +148,9 @@ def create_keystone_session(
 
         auth = method(**kwargs)
 
-        return session.Session(auth=auth, verify=not args.insecure)
+        verify = args.os_cacert or not args.insecure
+
+        return session.Session(auth=auth, verify=verify)
 
     def create_client(self, args):
         created_client = None