Open Stack

Hi All,

While upgrading from Kilo to Liberty, I am seeing these warnings in the
logs:-

./keystone/keystone.log:2016-05-11 13:40:34.013 20402 WARNING
oslo_config.cfg [-] Option "certfile" from group "ssl" is deprecated. Use
option "certfile" from group "eventlet_server_ssl".
./keystone/keystone.log:2016-05-11 13:40:34.013 20402 WARNING
oslo_config.cfg [-] Option "certfile" from group "eventlet_server_ssl" is
deprecated for removal.  Its value may be silently ignored in the future.
./keystone/keystone.log:2016-05-11 13:40:34.013 20402 WARNING
oslo_config.cfg [-] Option "keyfile" from group "ssl" is deprecated. Use
option "keyfile" from group "eventlet_server_ssl".
./keystone/keystone.log:2016-05-11 13:40:34.013 20402 WARNING
oslo_config.cfg [-] Option "keyfile" from group "eventlet_server_ssl" is
deprecated for removal.  Its value may be silently ignored in the future.
./keystone/keystone.log:2016-05-11 13:40:34.013 20402 WARNING
oslo_config.cfg [-] Option "ca_certs" from group "ssl" is deprecated. Use
option "ca_certs" from group "eventlet_server_ssl".
./keystone/keystone.log:2016-05-11 13:40:34.013 20402 WARNING
oslo_config.cfg [-] Option "ca_certs" from group "eventlet_server_ssl" is
deprecated for removal.  Its value may be silently ignored in the future.

It looks like the parameters certfile, keyfile, ca_certs are going to be
deprecated(might be deprecated by now) in future releases. For running
keystone with TLS, I need to specify the location of my certificates in
some configuration file. Does the above logs mean that we are going to
store the certs in some standard/default directory? I tried to find any
documentation specifying these changes or any configuration updates needed
to support these changes, but couldn't find any. Can someone please help me
out in identifying where the right configuration should be?

Thanks.

*Rahul Sharma*
*MS in Computer Science, 2016*
College of Computer and Information Science, Northeastern University
Mobile:  801-706-7860
Email: rahulsharmaait at gmail.com
Linkedin: www.linkedin.com/in/rahulsharmaait
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20160512/daa3ccba/attachment.html>