[Openstack-security] [openstack/keystone] SecurityImpact review request change Ic633e427fde7d161427ff6b59c83535cff374fd5

gerrit2 at review.openstack.org gerrit2 at review.openstack.org
Sun Nov 24 03:08:01 UTC 2013


Hi, I'd like you to take a look at this patch for potential
SecurityImpact.
https://review.openstack.org/58124

Log:
commit 82e116ad5c60f47dd669701de0838ef0ed462069
Author: Simo Sorce <simo at redhat.com>
Date:   Mon Oct 14 16:28:05 2013 +1000

    Initial KDS service
    
    The Key Distribution Service is used to register keys for services and
    distribute tickets to contact othe services.
    
    The KDS is used to digitally sign and optionally encrypt messages sent over the
    message queue by the rpc modules.
    
    KDS is designed to split off into its own service:  the concept is incubating in
    Keystone, but there is very little/none of it that interacts with core Keystone.
    
    It implements the service described in this document:
    https://wiki.openstack.org/wiki/MessageSecurity#A_Key_Distribution_Server_in_Keystone
    
    DocImpact
    SecurityImpact
    blueprint key-distribution-server
    
    Change-Id: Ic633e427fde7d161427ff6b59c83535cff374fd5
    Co-Authored-By: Jamie Lennox <jamielennox at redhat.com>
    Co-Authored-By: Adam Young <ayoung at redhat.com>





More information about the Openstack-security mailing list