<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 11/13/2013 05:59 PM, Hassan Shaik
wrote:<br>
</div>
<blockquote
cite="mid:CAGNe0D2WHhmU=--0DX2eUjTA7H2chMON+GvHMc_iCgTTbLnrbQ@mail.gmail.com"
type="cite">
<div dir="ltr">Hello Openstack security experts,
<div><br>
</div>
<div>I am trying to enable SSL/HTTPS in openstack REST API for
all services (nova/glance endpoint URL). However, I see the
documentation to enable SSL on keystone service alone.</div>
<div><br>
</div>
<div><a moz-do-not-send="true"
href="http://docs.openstack.org/grizzly/openstack-compute/admin/content//keystone-ssl.html">http://docs.openstack.org/grizzly/openstack-compute/admin/content//keystone-ssl.html</a><br>
</div>
<div><a moz-do-not-send="true"
href="http://docs.openstack.org/developer/keystone/configuration.html">http://docs.openstack.org/developer/keystone/configuration.html</a><br>
</div>
<div><br>
</div>
<div>1. Am I missing something? Is SSL/HTTPS supported for
nova/glance API too?</div>
<div>2. Also, when I try to enable SSL in keystone service, all
nova/glance CLI fail to work after the change. And, the debug
shows it is trying to make use of http even after enabling
SSL.</div>
</div>
</blockquote>
Do you have "auth_protocol" set to http in the [keystone_authtoken]
section of nova.conf? You can try commenting that out, or setting
it to https.<br>
<br>
Thanks,<br>
-NGK<br>
<blockquote
cite="mid:CAGNe0D2WHhmU=--0DX2eUjTA7H2chMON+GvHMc_iCgTTbLnrbQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div>
<div># nova --debug list</div>
<div><br>
</div>
<div>REQ: curl -i <b>http</b>://openstack-ip:5000/v2.0/tokens
-X POST -H "Content-Type: application/json" -H "Accept:
application/json" -H "User-Agent: python-novaclient" -d
'{"auth": {"tenantName": "admin", "passwordCredentials":
{"username": "admin", "password": "admin_pass"}}}'</div>
<div><br>
</div>
<div>Appreciate your help.</div>
<div><br>
</div>
<div>Thanks,<br>
Hassan</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Openstack-security mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Openstack-security@lists.openstack.org">Openstack-security@lists.openstack.org</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security</a>
</pre>
</blockquote>
<br>
</body>
</html>