diff options
| author | Maru Newby <mnewby@internap.com> | 2012-08-08 20:49:23 -0400 |
|---|---|---|
| committer | Adam Young <ayoung@redhat.com> | 2012-08-16 15:07:31 -0400 |
| commit | 7b70818954c2bc80bbfbb7679e0de9a483ee0c61 (patch) | |
| tree | 5af4d06d52c0284e2b2b89619e5f6d7391e74a9a /keystone/openstack | |
| parent | bf5ce27fb24b2f32b7f7e2dda332b2bd7abd6779 (diff) | |
PKI Token revocation
Co-authored-by: Adam Young <ayoung@redhat.com>
Token revocations are captured in the backends,
During upgrade, all previous tickets are defaulted to valid.
Revocation list returned as a signed document and can be fetched in an admin context via HTTP
Change config values for enable diable PKI
In the auth_token middleware, the revocation list is fetched prior
to validating tokens. Any tokens that are on the revocation list
will be treated as invalid.
Added in PKI token tests that check the same logic as the UUID tests.
Sample data for the tests is read out of the signing directory.
dropped number on sql scripts to pass tests.
Also fixes 1031373
Bug 1037683
Change-Id: Icef2f173e50fe3cce4273c161f69d41259bf5d23
Diffstat (limited to 'keystone/openstack')
0 files changed, 0 insertions, 0 deletions