[openstack-dev] [openstack-ansible][security] Creating a CA for openstack-ansible deployments?

Adam Young ayoung at redhat.com
Fri Nov 6 22:08:32 UTC 2015


On 11/06/2015 04:41 PM, Major Hayden wrote:
> The dogtag service looks interesting, but it has quite a few dependencies that may be a bit heavy resource-wise within the average openstack-ansible environment.

Nah, its not any worse than any other application; Java, Tomcat, and the 
code itself.  NSS is part of the base distro.

Dogtag should be the goto for anything not self-signed upstream.  In the 
case where people already have CAs, they can use whatever their 
organization provides.




More information about the OpenStack-dev mailing list