Open Stack

Hi, I'd like you to take a look at this patch for potential
SecurityImpact.
https://review.openstack.org/80401

Log:
commit 04c74b30d25e3a02aa25b30d1b6145574dbd9c06
Author: Brant Knudson <bknudson at us.ibm.com>
Date:   Thu Mar 27 19:10:10 2014 -0500

    Configurable token hash algorithm
    
    Tokens were always hashed with md5. This change allows tokens to
    be hashed with sha256 (or any other algorithm supported by the
    keystoneclient token hash function). This is for security
    hardening.
    
    There's a new configuration option 'hash_algorithm' in the [token]
    section. If this is not set then the server's behavior is the
    same as before. If it's set to a hash algorithm (such as 'sha256'),
    then PKI tokens will be hashed using that algorithm. Also, the
    configured hash algorithm is set on the revocation list.
    
    SecurityImpact
    DocImpact
    Closes-Bug: #1174499
    
    Change-Id: Iafe3c975d59818c8f362647f7ea5149a03deee47