[Bug 1567881] Re: keystone postinst should not call keystone-manage pki_setup

Chuck Short chuck.short at canonical.com
Wed Nov 2 22:49:26 UTC 2016


** Changed in: keystone (Ubuntu)
       Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to keystone in Ubuntu.
https://bugs.launchpad.net/bugs/1567881

Title:
  keystone postinst should not call keystone-manage pki_setup

Status in keystone package in Ubuntu:
  Fix Released

Bug description:
  Keystone PKI tokens have been deprecated for security reasons,
  deployments should switch to using Fernet tokens instead.

  So please remove the call to "keystone-manage pki_setup" from
  keystone.postinst at least for Xenial.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keystone/+bug/1567881/+subscriptions



More information about the Ubuntu-openstack-bugs mailing list