[Openstack-security] [openstack/keystone] SecurityImpact review request change I89543ccd84dd0ed0df39c4c247f354bb08adc23e

gerrit2 at review.openstack.org gerrit2 at review.openstack.org
Wed Aug 27 23:42:56 UTC 2014


Hi, I'd like you to take a look at this patch for potential
SecurityImpact.
https://review.openstack.org/117380

Log:
commit 227816aba6fcf8ddd2eb442ad3d93d9f8c868a4f
Author: Brant Knudson <bknudson at us.ibm.com>
Date:   Wed Aug 27 18:41:27 2014 -0500

    Configurable PKI token signature digest
    
    python-keystoneclient's token signing function (cms_sign_data) was
    recently enhanced to support configuring the digest algorithm. This
    adds a configuration option to Keystone to set the digest to use.
    
    SecurityImpact
    
    DocImpact
    
    A new `message_digest_algorithm` option is added to the [token]
    section of the config file.
    
    Change-Id: I89543ccd84dd0ed0df39c4c247f354bb08adc23e
    Related-Bug: #1362343





More information about the Openstack-security mailing list