<div dir="ltr">There are several upstream deployment projects that have SSL support baked in [0] [1], in case you want to pick through and see exactly how they deploy keystone with SSL.<div><br></div><div><br></div><div>[0] <a href="https://github.com/openstack/openstack-ansible-os_keystone">https://github.com/openstack/openstack-ansible-os_keystone</a></div><div>[1] <a href="https://github.com/openstack/puppet-keystone">https://github.com/openstack/puppet-keystone</a></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jul 11, 2016 at 2:57 AM, Kseniya Tychkova <span dir="ltr"><<a href="mailto:ktychkova@mirantis.com" target="_blank">ktychkova@mirantis.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<br>just follow instruction for your web server. For example, for Apache  - <a href="https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html" target="_blank">https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html</a><br>In short: <br>- create certificates<br>- install and enable ssl module<br>- enable ssl for keystone site (add directives in your /etc/apache2/sites-available/keystone-wsgi. conf file)</div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On Mon, Jul 11, 2016 at 6:22 AM, Jay Lau <span dir="ltr"><<a href="mailto:jay.lau.513@gmail.com" target="_blank">jay.lau.513@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr">Hi,<div><br></div><div>Does anyone have some experience or some document for how to configure keystone work with https? If so, can you please help share with me or show some links that can help?<span><font color="#888888"><br clear="all"><div><br></div>-- <br><div data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>Thanks,<br><br></div>Jay Lau (Guangya Liu)<br></div></div></div></div>
</font></span></div></div>
<br></div></div>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div>
<br>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div>