<div dir="ltr">Oops, forgot to reply-all.<br><div class="gmail_extra"><br><div class="gmail_quote">On Fri, May 13, 2016 at 1:43 AM, Rahul Sharma <span dir="ltr"><<a href="mailto:rahulsharmaait@gmail.com" target="_blank">rahulsharmaait@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Thank you Steve for pointing me in right direction. That was really helpful.<span class="HOEnZb"><font color="#888888"><div><br></div></font></span><div><span class="HOEnZb"><font color="#888888">- Rahul</font></span><div><div class="h5"><br><div class="gmail_extra">
<br><div class="gmail_quote">On Fri, May 13, 2016 at 1:02 AM, Steve Martinelli <span dir="ltr"><<a href="mailto:s.martinelli@gmail.com" target="_blank">s.martinelli@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">These options are related to running keystone under eventlet, which was deprecated in Kilo and removed in Newton. Keystone should be run under a real web server like apache or nginx. By running keystone with these tools configuring TLS should be much easier. There is a lot more detail about it here: <a href="http://docs.openstack.org/developer/keystone/apache-httpd.html" target="_blank">http://docs.openstack.org/developer/keystone/apache-httpd.html</a></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div>On Thu, May 12, 2016 at 11:56 PM, Rahul Sharma <span dir="ltr"><<a href="mailto:rahulsharmaait@gmail.com" target="_blank">rahulsharmaait@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr">Hi All,<div><br></div><div>While upgrading from Kilo to Liberty, I am seeing these warnings in the logs:-</div><div><br></div><div><div><font face="georgia, serif">./keystone/keystone.log:2016-05-11 13:40:34.013 20402 WARNING oslo_config.cfg [-] Option "certfile" from group "ssl" is deprecated. Use option "certfile" from group "eventlet_server_ssl".</font></div><div><font face="georgia, serif">./keystone/keystone.log:2016-05-11 13:40:34.013 20402 WARNING oslo_config.cfg [-] Option "certfile" from group "eventlet_server_ssl" is deprecated for removal. Its value may be silently ignored in the future.</font></div><div><font face="georgia, serif">./keystone/keystone.log:2016-05-11 13:40:34.013 20402 WARNING oslo_config.cfg [-] Option "keyfile" from group "ssl" is deprecated. Use option "keyfile" from group "eventlet_server_ssl".</font></div><div><font face="georgia, serif">./keystone/keystone.log:2016-05-11 13:40:34.013 20402 WARNING oslo_config.cfg [-] Option "keyfile" from group "eventlet_server_ssl" is deprecated for removal. Its value may be silently ignored in the future.</font></div><div><font face="georgia, serif">./keystone/keystone.log:2016-05-11 13:40:34.013 20402 WARNING oslo_config.cfg [-] Option "ca_certs" from group "ssl" is deprecated. Use option "ca_certs" from group "eventlet_server_ssl".</font></div><div><font face="georgia, serif">./keystone/keystone.log:2016-05-11 13:40:34.013 20402 WARNING oslo_config.cfg [-] Option "ca_certs" from group "eventlet_server_ssl" is deprecated for removal. Its value may be silently ignored in the future.</font></div><div><br></div><div>It looks like the parameters certfile, keyfile, ca_certs are going to be deprecated(might be deprecated by now) in future releases. For running keystone with TLS, I need to specify the location of my certificates in some configuration file. Does the above logs mean that we are going to store the certs in some standard/default directory? I tried to find any documentation specifying these changes or any configuration updates needed to support these changes, but couldn't find any. Can someone please help me out in identifying where the right configuration should be?</div><div><br></div><div>Thanks.</div><span><font color="#888888"><div><br></div><div><div><div dir="ltr"><b style="font-size:12.8px;color:rgb(136,136,136)"><font size="2">Rahul Sharma</font></b><br style="font-size:12.8px;color:rgb(136,136,136)"><font size="1" style="color:rgb(136,136,136)"><i>MS in Computer Science, 2016</i><br>College of Computer and Information Science, Northeastern University<br>Mobile: <a href="tel:801-706-7860" value="+18017067860" target="_blank">801-706-7860</a><br>Email: <a href="mailto:rahulsharmaait@gmail.com" target="_blank">rahulsharmaait@gmail.com</a><br>Linkedin: <a href="http://www.linkedin.com/in/rahulsharmaait" target="_blank">www.linkedin.com/in/rahulsharmaait</a></font><br></div></div></div>
</font></span></div></div>
<br></div></div>_______________________________________________<br>
OpenStack-operators mailing list<br>
<a href="mailto:OpenStack-operators@lists.openstack.org" target="_blank">OpenStack-operators@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br>
<br></blockquote></div><br></div>
</blockquote></div><br></div></div></div></div></div>
</blockquote></div><br></div></div>