[Openstack] [Keystone] PKI

Adam Young ayoung at redhat.com
Wed May 16 01:09:32 UTC 2012


Well, the PKI pieces are the same regardless of the CA and certificate 
issuing pieces.  All we will need to do is to use a signing key to sign 
a document.  So EJBCA or Dogtag will work equally as well.  If people 
already have a CA infrastructure, they should be able to leverage that, too.


On 05/15/2012 04:47 PM, Thor Wolpert wrote:
> If you're open to levarging other OSS projects, 
> http://www.ejbca.org/architecture.html us a great one to look at, 
> assuming you need a PKI implementation available.
>
> I believe it is at least worth a look.
>
> On Tue, May 15, 2012 at 1:30 PM, Razique Mahroua 
> <razique.mahroua at gmail.com <mailto:razique.mahroua at gmail.com>> wrote:
>
>     great topic :)
>
>
>>     Joseph Heck <mailto:heckj at mac.com>
>>     15 mai 2012 21:06
>>     Coming out of the Keystone meeting from today
>>     (http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-05-15-18.02.html),
>>     I thought it worth mentioning that adam young has been doing some
>>     tremendous lifting in terms of looking at adding in PKI support
>>     to Keystone. The writeup and details are on the OpenStack wiki at
>>     http://wiki.openstack.org/PKI
>>
>>     I rather suspect there's a lot of interest in this topic, so I
>>     wanted to make sure the broader community knew about the effort,
>>     what we were thinking, and were we are.
>>
>>     If you're interested in discussing, the keystone meeting is on
>>     Tuesday mornings at 18:00 UTC
>>
>>     -joe
>>
>>     _______________________________________________
>>     Mailing list: https://launchpad.net/~openstack
>>     <https://launchpad.net/%7Eopenstack>
>>     Post to : openstack at lists.launchpad.net
>>     <mailto:openstack at lists.launchpad.net>
>>     Unsubscribe : https://launchpad.net/~openstack
>>     <https://launchpad.net/%7Eopenstack>
>>     More help : https://help.launchpad.net/ListHelp
>
>     -- 
>     Nuage & Co - Razique Mahroua
>     razique.mahroua at gmail.com <mailto:razique.mahroua at gmail.com>
>
>
>
>
>     _______________________________________________
>     Mailing list: https://launchpad.net/~openstack
>     <https://launchpad.net/%7Eopenstack>
>     Post to     : openstack at lists.launchpad.net
>     <mailto:openstack at lists.launchpad.net>
>     Unsubscribe : https://launchpad.net/~openstack
>     <https://launchpad.net/%7Eopenstack>
>     More help   : https://help.launchpad.net/ListHelp
>
>
>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack at lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20120515/0b13f06d/attachment.html>


More information about the Openstack mailing list