[Bug 1567881] [NEW] keystone postinst should not call keystone-manage pki_setup

Dr. Jens Rosenboom j.rosenboom at x-ion.de
Fri Apr 8 10:52:30 UTC 2016


Public bug reported:

Keystone PKI tokens have been deprecated for security reasons,
deployments should switch to using Fernet tokens instead.

So please remove the call to "keystone-manage pki_setup" from
keystone.postinst at least for Xenial.

** Affects: keystone (Ubuntu)
     Importance: Low
         Status: Triaged

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to keystone in Ubuntu.
https://bugs.launchpad.net/bugs/1567881

Title:
  keystone postinst should not call keystone-manage pki_setup

Status in keystone package in Ubuntu:
  Triaged

Bug description:
  Keystone PKI tokens have been deprecated for security reasons,
  deployments should switch to using Fernet tokens instead.

  So please remove the call to "keystone-manage pki_setup" from
  keystone.postinst at least for Xenial.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keystone/+bug/1567881/+subscriptions



More information about the Ubuntu-openstack-bugs mailing list