)]}'
{"etc/keystone.conf.sample":[{"author":{"_account_id":220,"name":"Haneef Ali","email":"haneef.ali@hp.com","username":"haneef"},"change_message_id":"fc4af8075e90dacdcb8de0c11499329378463310","unresolved":false,"context_lines":[{"line_number":1351,"context_line":"# (string value)"},{"line_number":1352,"context_line":"#cert_subject\u003d/C\u003dUS/ST\u003dUnset/L\u003dUnset/O\u003dUnset/CN\u003dlocalhost"},{"line_number":1353,"context_line":""},{"line_number":1354,"context_line":"# Message digest algorithm to use for the SSL certificate."},{"line_number":1355,"context_line":"# This must be an algorithm supported by openssl (auto"},{"line_number":1356,"context_line":"# generated certificate). (string value)"},{"line_number":1357,"context_line":"#message_digest_algorithm\u003ddefault"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1abeadc6_68007901","line":1354,"updated":"2014-08-28 20:58:20.000000000","message":"This is a a parameter for the tool keystone-manage and it has nothing to do with keystone server. Do we need this in keystone.conf as keystone server never use this field.\n\nThis comment is same as this defect\nhttps://bugs.launchpad.net/keystone/+bug/1287414","commit_id":"61cd815ce153be4515ec1e9edf19ae188b781f7a"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"bcbf294cf63eba9a3302aac9ef4f00489f3e897d","unresolved":false,"context_lines":[{"line_number":1351,"context_line":"# (string value)"},{"line_number":1352,"context_line":"#cert_subject\u003d/C\u003dUS/ST\u003dUnset/L\u003dUnset/O\u003dUnset/CN\u003dlocalhost"},{"line_number":1353,"context_line":""},{"line_number":1354,"context_line":"# Message digest algorithm to use for the SSL certificate."},{"line_number":1355,"context_line":"# This must be an algorithm supported by openssl (auto"},{"line_number":1356,"context_line":"# generated certificate). (string value)"},{"line_number":1357,"context_line":"#message_digest_algorithm\u003ddefault"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1abeadc6_685f99e5","line":1354,"in_reply_to":"1abeadc6_68007901","updated":"2014-08-28 21:09:07.000000000","message":"If the other parameters were deprecated already then I\u0027d make it a parameter to pki/ssl_setup, but they\u0027re not.","commit_id":"61cd815ce153be4515ec1e9edf19ae188b781f7a"},{"author":{"_account_id":220,"name":"Haneef Ali","email":"haneef.ali@hp.com","username":"haneef"},"change_message_id":"8fb5055cb3b06431f2944756dd9ebff13550d703","unresolved":false,"context_lines":[{"line_number":1351,"context_line":"# (string value)"},{"line_number":1352,"context_line":"#cert_subject\u003d/C\u003dUS/ST\u003dUnset/L\u003dUnset/O\u003dUnset/CN\u003dlocalhost"},{"line_number":1353,"context_line":""},{"line_number":1354,"context_line":"# Message digest algorithm to use for the SSL certificate."},{"line_number":1355,"context_line":"# This must be an algorithm supported by openssl (auto"},{"line_number":1356,"context_line":"# generated certificate). (string value)"},{"line_number":1357,"context_line":"#message_digest_algorithm\u003ddefault"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"1abeadc6_73906a43","line":1354,"in_reply_to":"1abeadc6_685f99e5","updated":"2014-08-28 21:52:32.000000000","message":"I agree with you. My only concern is that  the consumers don\u0027t recognize this.  Before we realize it is everywhere. If you look at tripleo, they will try to configure this settings assuming that this is required for keystone server.","commit_id":"61cd815ce153be4515ec1e9edf19ae188b781f7a"}],"keystone/common/config.py":[{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"6db9b99aadc2781d8c56e5d331871ff9123eb7d2","unresolved":false,"context_lines":[{"line_number":393,"context_line":"                   default\u003d\u0027/C\u003dUS/ST\u003dUnset/L\u003dUnset/O\u003dUnset/CN\u003dlocalhost\u0027,"},{"line_number":394,"context_line":"                   help\u003d\u0027SSL certificate subject (auto generated \u0027"},{"line_number":395,"context_line":"                        \u0027certificate).\u0027),"},{"line_number":396,"context_line":"        cfg.StrOpt(\u0027message_digest_algorithm\u0027, default\u003d\u0027default\u0027,"},{"line_number":397,"context_line":"                   help\u003d\u0027Message digest algorithm to use for the SSL \u0027"},{"line_number":398,"context_line":"                        \u0027certificate. This must be an algorithm supported by \u0027"},{"line_number":399,"context_line":"                        \u0027openssl (auto generated certificate).\u0027),"}],"source_content_type":"text/x-python","patch_set":4,"id":"3a961159_c412bb08","line":396,"updated":"2014-12-17 14:44:29.000000000","message":"Should we default to \u0027sha1\u0027 instead of \u0027default\u0027? Looking at the help I don\u0027t know what the default algorithm is to know if I need to make it stronger.","commit_id":"fd6547d8441fdc8838665b8fa76ccea65fd0ef26"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"cd29ce07dd9006f5c27a6e1a4742cc3e7b59a9a0","unresolved":false,"context_lines":[{"line_number":393,"context_line":"                   default\u003d\u0027/C\u003dUS/ST\u003dUnset/L\u003dUnset/O\u003dUnset/CN\u003dlocalhost\u0027,"},{"line_number":394,"context_line":"                   help\u003d\u0027SSL certificate subject (auto generated \u0027"},{"line_number":395,"context_line":"                        \u0027certificate).\u0027),"},{"line_number":396,"context_line":"        cfg.StrOpt(\u0027message_digest_algorithm\u0027, default\u003d\u0027default\u0027,"},{"line_number":397,"context_line":"                   help\u003d\u0027Message digest algorithm to use for the SSL \u0027"},{"line_number":398,"context_line":"                        \u0027certificate. This must be an algorithm supported by \u0027"},{"line_number":399,"context_line":"                        \u0027openssl (auto generated certificate).\u0027),"}],"source_content_type":"text/x-python","patch_set":4,"id":"3a961159_3f84615c","line":396,"in_reply_to":"3a961159_c412bb08","updated":"2014-12-31 15:29:27.000000000","message":"I changed the help text... I like to be able to use the openssl default since openssl might change the default to be more secure.","commit_id":"fd6547d8441fdc8838665b8fa76ccea65fd0ef26"}]}