)]}'
{"keystone/conf/signing.py":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"9c4941fa53f18217ec509159c8b6137a8ebae542","unresolved":false,"context_lines":[{"line_number":46,"context_line":"    help\u003dutils.fmt(\"\"\""},{"line_number":47,"context_line":"Absolute path to the public certificate authority (CA) file to use when"},{"line_number":48,"context_line":"creating self-signed certificates with `keystone-manage pki_setup`. Set this"},{"line_number":49,"context_line":"together with `[signing] ca_key`. Unless you are using a `pki` or `pkiz`"},{"line_number":50,"context_line":"`[token] provider` value in a non-production environment, there is no reason to"},{"line_number":51,"context_line":"set this option. Use a `[signing] certfile` issued from a trusted certificate"},{"line_number":52,"context_line":"authority instead."}],"source_content_type":"text/x-python","patch_set":1,"id":"1aa78d24_4accb68a","line":49,"updated":"2016-07-13 20:37:48.000000000","message":"`PKI` or `pki` (same for `pkiz`)? Some reference them as all capitals and some don\u0027t. We should try and make them consistent as far as case is concerned.","commit_id":"9993cb9f2d606c0962e90b10086fc513e1bca7be"},{"author":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"change_message_id":"53cfa317ce2fe44d50d6308a0bd8f81aa0815d1b","unresolved":false,"context_lines":[{"line_number":46,"context_line":"    help\u003dutils.fmt(\"\"\""},{"line_number":47,"context_line":"Absolute path to the public certificate authority (CA) file to use when"},{"line_number":48,"context_line":"creating self-signed certificates with `keystone-manage pki_setup`. Set this"},{"line_number":49,"context_line":"together with `[signing] ca_key`. Unless you are using a `pki` or `pkiz`"},{"line_number":50,"context_line":"`[token] provider` value in a non-production environment, there is no reason to"},{"line_number":51,"context_line":"set this option. Use a `[signing] certfile` issued from a trusted certificate"},{"line_number":52,"context_line":"authority instead."}],"source_content_type":"text/x-python","patch_set":1,"id":"1aa78d24_4a24b60d","line":49,"in_reply_to":"1aa78d24_4accb68a","updated":"2016-07-13 20:47:34.000000000","message":"whoops, the capital ones above should not have been literals.","commit_id":"9993cb9f2d606c0962e90b10086fc513e1bca7be"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"ad98e93d037667ebf77c00409ac1a302eefbfa60","unresolved":false,"context_lines":[{"line_number":97,"context_line":"    deprecated_reason\u003dconstants._DEPRECATE_PKI_MSG,"},{"line_number":98,"context_line":"    default\u003d(\u0027/C\u003dUS/ST\u003dUnset/L\u003dUnset/O\u003dUnset/CN\u003dwww.example.com\u0027),"},{"line_number":99,"context_line":"    help\u003dutils.fmt(\"\"\""},{"line_number":100,"context_line":"The certificate subjcet to use when generating a self-signed token signing"},{"line_number":101,"context_line":"certificate. Unless you are using a `pki` or `pkiz` `[token] provider` value in"},{"line_number":102,"context_line":"a non-production environment, there is no reason to set this option. Use a"},{"line_number":103,"context_line":"`[signing] certfile` issued from a trusted certificate authority instead."}],"source_content_type":"text/x-python","patch_set":1,"id":"1aa78d24_2a3ccabe","line":100,"range":{"start_line":100,"start_character":16,"end_line":100,"end_character":23},"updated":"2016-07-13 20:31:07.000000000","message":"subject","commit_id":"9993cb9f2d606c0962e90b10086fc513e1bca7be"},{"author":{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},"change_message_id":"3bc9acea2ebc779e9cb7b31b26aaee35ac2898b0","unresolved":false,"context_lines":[{"line_number":24,"context_line":"    help\u003dutils.fmt(\"\"\""},{"line_number":25,"context_line":"Absolute path to the public certificate file to use for signing PKI and PKIZ"},{"line_number":26,"context_line":"tokens. Set this together with `[signing] keyfile`. For non-production"},{"line_number":27,"context_line":"environments, you may be interested in using `keystone-manage pki_setup` to"},{"line_number":28,"context_line":"generate self-signed certificates. There is no reason to set this option unless"},{"line_number":29,"context_line":"you are using either a `pki` or `pkiz` `[token] provider`."},{"line_number":30,"context_line":"\"\"\"))"}],"source_content_type":"text/x-python","patch_set":2,"id":"1aa78d24_09290e8a","line":27,"range":{"start_line":27,"start_character":25,"end_line":27,"end_character":35},"updated":"2016-07-14 04:26:38.000000000","message":"keystone-manage pki_setup is marked deprecated for removal in Ocata. I konw it was there before but do we want to keep it?\n\nOn second thoughts everything here is deprecated for removal in O","commit_id":"84aec993b8273c26e3aa5a51e6690d3283c7526e"},{"author":{"_account_id":18338,"name":"Ron De Rose","email":"ronald.de.rose@intel.com","username":"derosenet"},"change_message_id":"31fa99f1ed05be9e3a263d27a9486d34644d75c2","unresolved":false,"context_lines":[{"line_number":50,"context_line":"creating self-signed certificates with `keystone-manage pki_setup`. Set this"},{"line_number":51,"context_line":"together with `[signing] ca_key`. There is no reason to set this option unless"},{"line_number":52,"context_line":"you are using a `pki` or `pkiz` `[token] provider` value in a non-production"},{"line_number":53,"context_line":"environment. Use a `[signing] certfile` issued from a trusted certificate"},{"line_number":54,"context_line":"authority instead."},{"line_number":55,"context_line":"\"\"\"))"},{"line_number":56,"context_line":""}],"source_content_type":"text/x-python","patch_set":2,"id":"1aa78d24_2d6d049a","line":53,"range":{"start_line":53,"start_character":0,"end_line":53,"end_character":19},"updated":"2016-07-13 20:55:00.000000000","message":"nit: this sounds a little weird.  Maybe, \"Otherwise use a [signing] certfile...\"","commit_id":"84aec993b8273c26e3aa5a51e6690d3283c7526e"},{"author":{"_account_id":18338,"name":"Ron De Rose","email":"ronald.de.rose@intel.com","username":"derosenet"},"change_message_id":"31fa99f1ed05be9e3a263d27a9486d34644d75c2","unresolved":false,"context_lines":[{"line_number":64,"context_line":"creating self-signed certificates with `keystone-manage pki_setup`. Set this"},{"line_number":65,"context_line":"together with `[signing] ca_certs`. There is no reason to set this option"},{"line_number":66,"context_line":"unless you are using a `pki` or `pkiz` `[token] provider` value in a"},{"line_number":67,"context_line":"non-production environment. Use a `[signing] certfile` issued from a trusted"},{"line_number":68,"context_line":"certificate authority instead."},{"line_number":69,"context_line":"\"\"\"))"},{"line_number":70,"context_line":""}],"source_content_type":"text/x-python","patch_set":2,"id":"1aa78d24_cd0280ba","line":67,"range":{"start_line":67,"start_character":15,"end_line":67,"end_character":32},"updated":"2016-07-13 20:55:00.000000000","message":"Same...","commit_id":"84aec993b8273c26e3aa5a51e6690d3283c7526e"},{"author":{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},"change_message_id":"3bc9acea2ebc779e9cb7b31b26aaee35ac2898b0","unresolved":false,"context_lines":[{"line_number":76,"context_line":"    deprecated_reason\u003dconstants._DEPRECATE_PKI_MSG,"},{"line_number":77,"context_line":"    help\u003dutils.fmt(\"\"\""},{"line_number":78,"context_line":"Key size (in bits) to use when generating a self-signed token signing"},{"line_number":79,"context_line":"certificate. There is no reason to set this option unless you are using a `pki`"},{"line_number":80,"context_line":"or `pkiz` `[token] provider` value in a non-production environment. Use a"},{"line_number":81,"context_line":"`[signing] certfile` issued from a trusted certificate authority instead."},{"line_number":82,"context_line":"\"\"\"))"}],"source_content_type":"text/x-python","patch_set":2,"id":"1aa78d24_e9492262","line":79,"range":{"start_line":79,"start_character":12,"end_line":79,"end_character":13},"updated":"2016-07-14 04:26:38.000000000","message":"certificate with `keystone-manage pki_setup`.","commit_id":"84aec993b8273c26e3aa5a51e6690d3283c7526e"},{"author":{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},"change_message_id":"3bc9acea2ebc779e9cb7b31b26aaee35ac2898b0","unresolved":false,"context_lines":[{"line_number":88,"context_line":"    deprecated_reason\u003dconstants._DEPRECATE_PKI_MSG,"},{"line_number":89,"context_line":"    help\u003dutils.fmt(\"\"\""},{"line_number":90,"context_line":"The validity period (in days) to use when generating a self-signed token"},{"line_number":91,"context_line":"signing certificate. There is no reason to set this option unless you are using"},{"line_number":92,"context_line":"a `pki` or `pkiz` `[token] provider` value in a non-production environment. Use"},{"line_number":93,"context_line":"a `[signing] certfile` issued from a trusted certificate authority instead."},{"line_number":94,"context_line":"\"\"\"))"}],"source_content_type":"text/x-python","patch_set":2,"id":"1aa78d24_696c12d1","line":91,"range":{"start_line":91,"start_character":21,"end_line":91,"end_character":26},"updated":"2016-07-14 04:26:38.000000000","message":"certificate with `keystone-manage pki_setup`.","commit_id":"84aec993b8273c26e3aa5a51e6690d3283c7526e"},{"author":{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},"change_message_id":"3bc9acea2ebc779e9cb7b31b26aaee35ac2898b0","unresolved":false,"context_lines":[{"line_number":100,"context_line":"    default\u003d(\u0027/C\u003dUS/ST\u003dUnset/L\u003dUnset/O\u003dUnset/CN\u003dwww.example.com\u0027),"},{"line_number":101,"context_line":"    help\u003dutils.fmt(\"\"\""},{"line_number":102,"context_line":"The certificate subject to use when generating a self-signed token signing"},{"line_number":103,"context_line":"certificate. There is no reason to set this option unless you are using a `pki`"},{"line_number":104,"context_line":"or `pkiz` `[token] provider` value in a non-production environment. Use a"},{"line_number":105,"context_line":"`[signing] certfile` issued from a trusted certificate authority instead."},{"line_number":106,"context_line":"\"\"\"))"}],"source_content_type":"text/x-python","patch_set":2,"id":"1aa78d24_89633edd","line":103,"range":{"start_line":103,"start_character":12,"end_line":103,"end_character":13},"updated":"2016-07-14 04:26:38.000000000","message":"certificate with `keystone-manage pki_setup`.","commit_id":"84aec993b8273c26e3aa5a51e6690d3283c7526e"}]}