<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi Adam,<div><br></div><div>The blueprint as revised to address Joe's comments looks good to me - nice work. I especially like how the middleware is intended to cache the revocation list for a configurable amount of time - it mirrors how token caching already works.</div><div><br></div><div>Cheers,</div><div><br></div><div><br></div><div>Maru</div><div><br><div><div>On 2012-08-07, at 10:09 AM, Adam Young wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type">
<div bgcolor="#FFFFFF" text="#000000">
On 08/01/2012 09:19 PM, Maru Newby wrote:
<blockquote cite="mid:71BD4F07-1B97-46E4-BF67-08BB8B765A5B@internap.com" type="cite">I see that support for PKI Signed Tokens has been
added to Keystone without support for token revocation. I tried
to raise this issue on the bug report:
<div><br>
</div>
<div><a moz-do-not-send="true" href="https://bugs.launchpad.net/keystone/+bug/1003962/comments/4">https://bugs.launchpad.net/keystone/+bug/1003962/comments/4</a></div>
<div><br>
</div>
<div>And the review:</div>
<div><br>
</div>
<div><a moz-do-not-send="true" href="https://review.openstack.org/#/c/7754/">https://review.openstack.org/#/c/7754/</a></div>
<div><br>
</div>
<div>I'm curious as to whether anybody shares my concern and if
there is a specific reason why nobody responded to my question
as to why revocation is not required for this new token scheme.
Anybody?</div>
</blockquote>
<br>
I have written up a blueprint for PKI token revocation. Please
provide feedback.<br>
<br>
<br>
<a class="moz-txt-link-freetext" href="https://blueprints.launchpad.net/keystone/+spec/pki-revoke">https://blueprints.launchpad.net/keystone/+spec/pki-revoke</a><br>
<br>
<blockquote cite="mid:71BD4F07-1B97-46E4-BF67-08BB8B765A5B@internap.com" type="cite">
<div><br>
</div>
<div>Thanks,</div>
<div><br>
</div>
<div><br>
</div>
<div>Maru</div>
<div><br>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Mailing list: <a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a>
Post to : <a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a>
Unsubscribe : <a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a>
More help : <a class="moz-txt-link-freetext" href="https://help.launchpad.net/ListHelp">https://help.launchpad.net/ListHelp</a>
</pre>
</blockquote>
<br>
<br>
<br>
</div>
_______________________________________________<br>Mailing list: <a href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a><br>Post to : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>Unsubscribe : <a href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a><br>More help : <a href="https://help.launchpad.net/ListHelp">https://help.launchpad.net/ListHelp</a><br></blockquote></div><br></div></body></html>