Re: [openstack-dev] [Keystone] Blob in keystone v3 certificate API

2013-11-15 Thread Dolph Mathews
It sounds like you're looking for barbican :)

  https://github.com/stackforge/barbican


On Thu, Nov 14, 2013 at 8:55 PM, Nachi Ueno  wrote:

> Hi Keystone guys
>
> I'm going to use  keystone credentials API to store SSL-VPN certificate.
> However I have a concern about blob attribute.
>
> Since it is really free format.  We can't provider validation on the data.
> Of course, we can write some helper validation function, but
> users can break it...
>
> Also we can't ensure the backward compatibilities with such free
> format API definitions.
>
> (1) IMO, we should not use free format attribute such as blob or
> arbitrary key,value pairs.
> (2) Should we use this API as a storage for certificate used in any
> openstack services?
> Since it is hard to provider validation on such API, I'm start
> thinking to have vpn certificate API in neutron.
>
> Best
> Nachi
>
> ___
> OpenStack-dev mailing list
> OpenStack-dev@lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



-- 

-Dolph
___
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Keystone] Blob in keystone v3 certificate API

2013-11-14 Thread Nachi Ueno
Hi Keystone guys

I'm going to use  keystone credentials API to store SSL-VPN certificate.
However I have a concern about blob attribute.

Since it is really free format.  We can't provider validation on the data.
Of course, we can write some helper validation function, but
users can break it...

Also we can't ensure the backward compatibilities with such free
format API definitions.

(1) IMO, we should not use free format attribute such as blob or
arbitrary key,value pairs.
(2) Should we use this API as a storage for certificate used in any
openstack services?
Since it is hard to provider validation on such API, I'm start
thinking to have vpn certificate API in neutron.

Best
Nachi

___
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev