[Openstack] Keystoner as Certificate Authority

Somanchi Trinath-B39208 B39208 at freescale.com
Thu Sep 5 06:41:31 UTC 2013


Hi- 

Thanks a lot Jeff.

Can you suggest me on any CA service work going on with Openstack. 

A Private or Local CA. 

--
Trinath Somanchi - B39208
trinath.somanchi at freescale.com | extn: 4048


-----Original Message-----
From: Jeffrey Walton [mailto:noloader at gmail.com] 
Sent: Thursday, September 05, 2013 10:37 AM
To: Somanchi Trinath-B39208
Cc: openstack at lists.openstack.org
Subject: Re: [Openstack] Keystoner as Certificate Authority

On Thu, Sep 5, 2013 at 12:40 AM, Somanchi Trinath-B39208 <B39208 at freescale.com> wrote:
>
> Can we use Keystone as Certificate Authority. Kindly help me in
I can't answer if it can be used to issue certs, but I can tell you it should not be. That portion of the infrastructure needs to be segregated with a well defined security zone or boundary.

Jeff



More information about the Openstack mailing list