[openstack-dev] [keystone] Can anyone share some experience for how to configure keystone work with https

Lance Bragstad lbragstad at gmail.com
Mon Jul 11 14:09:54 UTC 2016


There are several upstream deployment projects that have SSL support baked
in [0] [1], in case you want to pick through and see exactly how they
deploy keystone with SSL.


[0] https://github.com/openstack/openstack-ansible-os_keystone
[1] https://github.com/openstack/puppet-keystone

On Mon, Jul 11, 2016 at 2:57 AM, Kseniya Tychkova <ktychkova at mirantis.com>
wrote:

> Hi,
> just follow instruction for your web server. For example, for Apache  -
> https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html
> In short:
> - create certificates
> - install and enable ssl module
> - enable ssl for keystone site (add directives in your
> /etc/apache2/sites-available/keystone-wsgi. conf file)
>
> On Mon, Jul 11, 2016 at 6:22 AM, Jay Lau <jay.lau.513 at gmail.com> wrote:
>
>> Hi,
>>
>> Does anyone have some experience or some document for how to configure
>> keystone work with https? If so, can you please help share with me or show
>> some links that can help?
>>
>> --
>> Thanks,
>>
>> Jay Lau (Guangya Liu)
>>
>> __________________________________________________________________________
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe:
>> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160711/aa008f84/attachment.html>


More information about the OpenStack-dev mailing list