[Bug 1567881] Re: keystone postinst should not call keystone-manage pki_setup

James Page james.page at ubuntu.com
Fri Apr 8 10:55:29 UTC 2016


** Changed in: keystone (Ubuntu)
       Status: New => Triaged

** Changed in: keystone (Ubuntu)
   Importance: Undecided => Low

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to keystone in Ubuntu.
https://bugs.launchpad.net/bugs/1567881

Title:
  keystone postinst should not call keystone-manage pki_setup

Status in keystone package in Ubuntu:
  Triaged

Bug description:
  Keystone PKI tokens have been deprecated for security reasons,
  deployments should switch to using Fernet tokens instead.

  So please remove the call to "keystone-manage pki_setup" from
  keystone.postinst at least for Xenial.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keystone/+bug/1567881/+subscriptions



More information about the Ubuntu-openstack-bugs mailing list