Refactor tls certs for xmpp

Related: PROD-23929 (PROD:23929)

Change-Id: I5008c93b65fa42c8198e0e064aad4c738305cc44
diff --git a/README.rst b/README.rst
index f90f2fb..1b642ba 100644
--- a/README.rst
+++ b/README.rst
@@ -717,6 +717,43 @@
           token: none
         ...
 
+XMPP Encryption
+---------------
+
+Configure encryption of XMPP
+
+Computes nodes
+~~~~~~~~~~~~~~
+
+.. code-block:: yaml
+
+  opencontrail:
+    compute:
+      xmpp:
+        tls:
+          enabled: False
+          auth:
+            enabled: False
+          (optional) cert_file: /etc/contrail/server.pem
+          (optional) key_file: /etc/contrail/privkey.pem
+          (optional) ca_cert_file: /etc/contrail/ca-cert.pem
+
+Control nodes
+~~~~~~~~~~~~~
+
+.. code-block:: yaml
+
+  opencontrail:
+    control:
+      xmpp:
+        tls:
+          enabled: False
+          auth:
+            enabled: False
+          (optional) cert_file: /etc/contrail/server.pem
+          (optional) key_file: /etc/contrail/privkey.pem
+          (optional) ca_cert_file: /etc/contrail/ca-cert.pem
+
 Kubernetes support
 ------------------
 
@@ -1247,7 +1284,7 @@
             - [tenant3, 7]
 
 
-If you want to remove all shares from the ip floating pool, define only empty list in 
+If you want to remove all shares from the ip floating pool, define only empty list in
 list of projects, like this:
 
 .. code-block:: yaml