Improve comment further

thanks @chess-knight!

Signed-off-by: Matthias Büchse <matthias.buechse@alasca.cloud>

Author: mbuechse

Tests/iaas/scs_0123_mandatory_services/mandatory_services.py

@@ -30,9 +30,9 @@ def s3_conn(creds, conn):
     """Return an s3 client conn"""
     cfg = conn.config.config
     # Take insecure/verify/cacert parameter from clouds.yaml and pass it to boto3.resource.
-    # If verify is True in clouds.yaml, fall back to cacert or None. In the latter case,
-    # the default boto3 behavior is applied (where REQUESTS_CA_BUNDLE can still be used,
-    # and otherwise, boto3 defaults to verify=True).
+    # If insecure is False/None and verify is True/None in clouds.yaml, fall back to cacert or None.
+    # In the latter case (None), the default boto3 behavior is applied (where config file or env
+    # variables can still be used, and otherwise, boto3 defaults to verify=True).
     # Note: cacert must be used to pass the certificate; don't use verify for that; cf.
     # https://docs.openstack.org/openstacksdk/latest/user/config/configuration.html#ssl-settings
     if cfg.get("insecure") or not cfg.get("verify", True):