yum-epel failure on CentOS 6.4 (due to httpS / SSL verify failure / old CA cert bundle)

kitchen-default-centos-64.log

           ---- Begin output of yum -q makecache --disablerepo=* --enablerepo=epel ----
           STDOUT:
           STDERR: Error: Cannot retrieve metalink for repository: epel. Please verify its path and try again
           ---- End output of yum -q makecache --disablerepo=* --enablerepo=epel ----
           Ran yum -q makecache --disablerepo=* --enablerepo=epel returned 1

           Resource Declaration:
           ---------------------
           # In /tmp/kitchen/cookbooks/yum-epel/recipes/default.rb

            22:     yum_repository repo do
            23:       baseurl node['yum'][repo]['baseurl']
            24:       cost node['yum'][repo]['cost']
            25:       description node['yum'][repo]['description']
            26:       enabled node['yum'][repo]['enabled']
            27:       enablegroups node['yum'][repo]['enablegroups']
            28:       exclude node['yum'][repo]['exclude']
            29:       failovermethod node['yum'][repo]['failovermethod']
            30:       fastestmirror_enabled node['yum'][repo]['fastestmirror_enabled']
            31:       gpgcheck node['yum'][repo]['gpgcheck']
            32:       gpgkey node['yum'][repo]['gpgkey']
            33:       http_caching node['yum'][repo]['http_caching']
            34:       include_config node['yum'][repo]['include_config']
            35:       includepkgs node['yum'][repo]['includepkgs']
            36:       keepalive node['yum'][repo]['keepalive']
            37:       max_retries node['yum'][repo]['max_retries']
            38:       metadata_expire node['yum'][repo]['metadata_expire']
            39:       mirror_expire node['yum'][repo]['mirror_expire']
            40:       mirrorlist node['yum'][repo]['mirrorlist']

            41:       mirrorlist_expire node['yum'][repo]['mirrorlist_expire']
            42:       password node['yum'][repo]['password']
            43:       priority node['yum'][repo]['priority']
            44:       proxy node['yum'][repo]['proxy']
            45:       proxy_username node['yum'][repo]['proxy_username']
            46:       proxy_password node['yum'][repo]['proxy_password']
            47:       report_instanceid node['yum'][repo]['report_instanceid']
            48:       repositoryid node['yum'][repo]['repositoryid']
            49:       skip_if_unavailable node['yum'][repo]['skip_if_unavailable']
            50:       source node['yum'][repo]['source']
            51:       sslcacert node['yum'][repo]['sslcacert']
            52:       sslclientcert node['yum'][repo]['sslclientcert']
            53:       sslclientkey node['yum'][repo]['sslclientkey']
            54:       sslverify node['yum'][repo]['sslverify']
            55:       timeout node['yum'][repo]['timeout']
            56:       username node['yum'][repo]['username']
            57:
            58:       action :create
            59:     end
            60:   end

           Compiled Resource:
           ------------------
           # Declared in /tmp/kitchen/cookbooks/yum-epel/recipes/default.rb:22:in `block in from_file'

           yum_repository("epel") do
             action [:create]
             updated true
             updated_by_last_action true
             retries 0
             retry_delay 2
             guard_interpreter :default
             cookbook_name :"yum-epel"
             recipe_name "default"
             description "Extra Packages for Enterprise Linux 6 - $basearch"
             enabled true
             failovermethod "priority"
             gpgcheck true
             gpgkey "https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-6"
             mirrorlist "https://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=$basearch"
             repositoryid "epel"
             sslverify true
             mode "0644"
             make_cache true
           end


       [2014-11-19T04:42:38+00:00] INFO: Running queued delayed notifications before re-raising exception

       Running handlers:
       [2014-11-19T04:42:38+00:00] ERROR: Running exception handlers
       Running handlers complete
       [2014-11-19T04:42:38+00:00] ERROR: Exception handlers complete
       [2014-11-19T04:42:38+00:00] FATAL: Stacktrace dumped to /tmp/kitchen/cache/chef-stacktrace.out
       Chef Client failed. 1 resources updated in 12.596329348 seconds
       [2014-11-19T04:42:38+00:00] ERROR: yum_repository[epel] (yum-epel::default line 22) had an error: Mixlib::ShellOut::ShellCommandFailed: execute[yum-makecache-epel] (/tmp/kitchen/cookbooks/yum/providers/repository.rb line 55) had an error: Mixlib::ShellOut::ShellCommandFailed: Expected process to exit with [0], but received '1'
       ---- Begin output of yum -q makecache --disablerepo=* --enablerepo=epel ----
       STDOUT:
       STDERR: Error: Cannot retrieve metalink for repository: epel. Please verify its path and try again
       ---- End output of yum -q makecache --disablerepo=* --enablerepo=epel ----
       Ran yum -q makecache --disablerepo=* --enablerepo=epel returned 1
       [2014-11-19T04:42:38+00:00] FATAL: Chef::Exceptions::ChildConvergeError: Chef run process exited unsuccessfully (exit code 1)