[keystone] [nova] Ed25519 support

Sean Mooney smooney at redhat.com
Mon Sep 20 09:47:36 UTC 2021


On Mon, 2021-09-20 at 02:31 +0000, Eduardo Santos wrote:
> Hi folks,
> 
> I'm trying to create an instance with an assigned keypair that uses the
> Ed25519 algorithm, but I'm unable to login into the instance without
> providing a password (I generated the public key without a passphrase). RSA
> keypairs work fine.
> 
> Is Ed25519 not supported? I didn't find a support matrix in the
> documentation.
this need a newer version of python-cryptography to work.
specifically in the 2.6+.
also keypairs are part of nova not keystone so updated the subject.
i have left keystone incase there is some use of keypairs in keystone im unaware of but
if you are using OSP or any other distibution of openstack they proably have a bug like
https://bugzilla.redhat.com/show_bug.cgi?id=1873581 tor track updating the version.

in redhat osp 16.2 this is now suppported on rhel 8.4 which is based on upstream train.
so this is suported but you just need the corret lib version to allow it to work.

if you have the correct version of  python-cryptography then it might depend on your guest
OS as it will also need to support that key algorthim too.

> 
> Thanks.





More information about the openstack-discuss mailing list