This builds on X509.
I've written up a proof of concept.
http://adam.younglogic.com/2012/05/signed-authz-authn/
On 05/16/2012 02:21 AM, Tim Bell wrote:
Fully agreed. Academic and Research sites have extensive X.509
infrastructure that we would not wish to duplicate.
Are you only looking at user certificates or are host certificates in
the scope too ?
Tim
*From:*openstack-bounces+tim.bell=cern...@lists.launchpad.net
[mailto:openstack-bounces+tim.bell=cern...@lists.launchpad.net] *On
Behalf Of *Adam Young
*Sent:* 16 May 2012 03:10
*To:* openstack@lists.launchpad.net
*Subject:* Re: [Openstack] [Keystone] PKI
Well, the PKI pieces are the same regardless of the CA and certificate
issuing pieces. All we will need to do is to use a signing key to
sign a document. So EJBCA or Dogtag will work equally as well. If
people already have a CA infrastructure, they should be able to
leverage that, too.
On 05/15/2012 04:47 PM, Thor Wolpert wrote:
If you're open to levarging other OSS projects,
http://www.ejbca.org/architecture.html us a great one to look at,
assuming you need a PKI implementation available.
I believe it is at least worth a look.
On Tue, May 15, 2012 at 1:30 PM, Razique Mahroua
<razique.mahr...@gmail.com <mailto:razique.mahr...@gmail.com>> wrote:
great topic :)
*Joseph Heck* <mailto:he...@mac.com>
15 mai 2012 21:06
Coming out of the Keystone meeting from today
(http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-05-15-18.02.html),
I thought it worth mentioning that adam young has been doing some
tremendous lifting in terms of looking at adding in PKI support to
Keystone. The writeup and details are on the OpenStack wiki at
http://wiki.openstack.org/PKI
I rather suspect there's a lot of interest in this topic, so I wanted
to make sure the broader community knew about the effort, what we were
thinking, and were we are.
If you're interested in discussing, the keystone meeting is on Tuesday
mornings at 18:00 UTC
-joe
_______________________________________________
Mailing list: https://launchpad.net/~openstack
<https://launchpad.net/%7Eopenstack>
Post to : openstack@lists.launchpad.net
<mailto:openstack@lists.launchpad.net>
Unsubscribe : https://launchpad.net/~openstack
<https://launchpad.net/%7Eopenstack>
More help : https://help.launchpad.net/ListHelp
--
Nuage & Co - Razique Mahroua
*razique.mahr...@gmail.com <mailto:razique.mahr...@gmail.com>*
_______________________________________________
Mailing list: https://launchpad.net/~openstack
<https://launchpad.net/%7Eopenstack>
Post to : openstack@lists.launchpad.net
<mailto:openstack@lists.launchpad.net>
Unsubscribe : https://launchpad.net/~openstack
<https://launchpad.net/%7Eopenstack>
More help : https://help.launchpad.net/ListHelp
_______________________________________________
Mailing list:https://launchpad.net/~openstack
<https://launchpad.net/%7Eopenstack>
Post to :openstack@lists.launchpad.net
<mailto:openstack@lists.launchpad.net>
Unsubscribe :https://launchpad.net/~openstack
<https://launchpad.net/%7Eopenstack>
More help :https://help.launchpad.net/ListHelp
_______________________________________________
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
