yahoo-eng-team team mailing list archive

[Jamie Lennox <jamielennox@xxxxxxxxxx>]

Public bug reported:

Auth_token middleware relies upon the V2 api to provide the certificates
that are required to validate PKI tokens because this information is not
provided by the V3 API.

Longer term i think we should be encouraging deployers to handle their
own certificate distribution as fetching the certificates from the same
source that is issuing tokens is not secure, however for the mean time
we need some way of providing these certificates to token validators.

** Affects: keystone
     Importance: Undecided
         Status: New

** Affects: python-keystoneclient
     Importance: Undecided
         Status: New

** Also affects: python-keystoneclient
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1259011

Title:
  Certificates cannot be retrieved from the V3 API

Status in OpenStack Identity (Keystone):
  New
Status in Python client library for Keystone:
  New

Bug description:
  Auth_token middleware relies upon the V2 api to provide the
  certificates that are required to validate PKI tokens because this
  information is not provided by the V3 API.

  Longer term i think we should be encouraging deployers to handle their
  own certificate distribution as fetching the certificates from the
  same source that is issuing tokens is not secure, however for the mean
  time we need some way of providing these certificates to token
  validators.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1259011/+subscriptions