Re: [openstack-dev] [keystone] Can anyone share some experience for how to configure keystone work with https

2016-07-11 Thread Lance Bragstad
There are several upstream deployment projects that have SSL support baked
in [0] [1], in case you want to pick through and see exactly how they
deploy keystone with SSL.


[0] https://github.com/openstack/openstack-ansible-os_keystone
[1] https://github.com/openstack/puppet-keystone

On Mon, Jul 11, 2016 at 2:57 AM, Kseniya Tychkova 
wrote:

> Hi,
> just follow instruction for your web server. For example, for Apache  -
> https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html
> In short:
> - create certificates
> - install and enable ssl module
> - enable ssl for keystone site (add directives in your
> /etc/apache2/sites-available/keystone-wsgi. conf file)
>
> On Mon, Jul 11, 2016 at 6:22 AM, Jay Lau  wrote:
>
>> Hi,
>>
>> Does anyone have some experience or some document for how to configure
>> keystone work with https? If so, can you please help share with me or show
>> some links that can help?
>>
>> --
>> Thanks,
>>
>> Jay Lau (Guangya Liu)
>>
>> __
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe:
>> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>>
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [keystone] Can anyone share some experience for how to configure keystone work with https

2016-07-11 Thread Kseniya Tychkova
Hi,
just follow instruction for your web server. For example, for Apache  -
https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html
In short:
- create certificates
- install and enable ssl module
- enable ssl for keystone site (add directives in your
/etc/apache2/sites-available/keystone-wsgi. conf file)

On Mon, Jul 11, 2016 at 6:22 AM, Jay Lau  wrote:

> Hi,
>
> Does anyone have some experience or some document for how to configure
> keystone work with https? If so, can you please help share with me or show
> some links that can help?
>
> --
> Thanks,
>
> Jay Lau (Guangya Liu)
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [keystone] Can anyone share some experience for how to configure keystone work with https

2016-07-10 Thread Jay Lau
Hi,

Does anyone have some experience or some document for how to configure
keystone work with https? If so, can you please help share with me or show
some links that can help?

-- 
Thanks,

Jay Lau (Guangya Liu)
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev