)]}'
{"api-guide/source/general_info.rst":[{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"284af8c4530836349ff40d32a5e5972c8925bbf6","unresolved":false,"context_lines":[{"line_number":53,"context_line":"   An ssh or x509 keypair that can be injected into a server. This allows you"},{"line_number":54,"context_line":"   to connect to your server once it has been created without having to use a"},{"line_number":55,"context_line":"   password. If you don\u0027t specify a key pair, Nova will create a root password"},{"line_number":56,"context_line":"   for you, and return it in plain text in the server create response."},{"line_number":57,"context_line":""},{"line_number":58,"context_line":"-  **Volume**"},{"line_number":59,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_3c1633a8","line":56,"updated":"2015-12-09 15:46:44.000000000","message":"You seem to be repeating this section.","commit_id":"ae44dc5a3a34e7a63251e235038205c162e258d3"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"284af8c4530836349ff40d32a5e5972c8925bbf6","unresolved":false,"context_lines":[{"line_number":245,"context_line":""},{"line_number":246,"context_line":"   TODO"},{"line_number":247,"context_line":""},{"line_number":248,"context_line":"-  **Certificates**"},{"line_number":249,"context_line":""},{"line_number":250,"context_line":"   For Linux guests, Nova keypairs are mostly used to handle user"},{"line_number":251,"context_line":"   authentication via SSH public key authentication without"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_7ceefbb5","line":248,"updated":"2015-12-09 15:46:44.000000000","message":"Hang on, most of the text here appears to be about key-pairs and not certificates?","commit_id":"ae44dc5a3a34e7a63251e235038205c162e258d3"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"b4bffce77010557d4ad865dd193fed403ddc765a","unresolved":false,"context_lines":[{"line_number":245,"context_line":""},{"line_number":246,"context_line":"   TODO"},{"line_number":247,"context_line":""},{"line_number":248,"context_line":"-  **Certificates**"},{"line_number":249,"context_line":""},{"line_number":250,"context_line":"   For Linux guests, Nova keypairs are mostly used to handle user"},{"line_number":251,"context_line":"   authentication via SSH public key authentication without"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_cd195e7b","line":248,"in_reply_to":"7a740942_7ceefbb5","updated":"2015-12-10 02:21:29.000000000","message":"yea, just wanted to give more background on X509 certificates but lets be precise on this.","commit_id":"ae44dc5a3a34e7a63251e235038205c162e258d3"},{"author":{"_account_id":6167,"name":"Ken\u0027ichi Ohmichi","email":"ken1ohmichi@gmail.com","username":"oomichi"},"change_message_id":"c6d74d8bcc04fa3c32b2fe44fb688c72bc55a923","unresolved":false,"context_lines":[{"line_number":249,"context_line":""},{"line_number":250,"context_line":"   For Linux guests, Nova keypairs are mostly used to handle user"},{"line_number":251,"context_line":"   authentication via SSH public key authentication without"},{"line_number":252,"context_line":"   incurring in the management and security overhead that passwords require."},{"line_number":253,"context_line":""},{"line_number":254,"context_line":"   Windows operating systems don\u0027t support natively SSH and thus authentication"},{"line_number":255,"context_line":"   requires the usage of passwords unless the image deployer chooses to include"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_c54d2a3f","line":252,"updated":"2015-12-08 08:56:53.000000000","message":"\"without incurring ..\" seems difficult for me.\n\nhow about\n\n \".. without password authentication.\"\n\nor something instead?","commit_id":"ae44dc5a3a34e7a63251e235038205c162e258d3"},{"author":{"_account_id":6062,"name":"jichenjc","email":"jichenjc@cn.ibm.com","username":"jichenjc"},"change_message_id":"6f8769d96507c0f401abba6510dea8cf86091ca3","unresolved":false,"context_lines":[{"line_number":255,"context_line":"   requires the usage of passwords unless the image deployer chooses to include"},{"line_number":256,"context_line":"   a 3rd party unsupported SSH service port, which implies incurring in potential"},{"line_number":257,"context_line":"   security and support issues."},{"line_number":258,"context_line":"   Windows supports natively password-less authentication for WinRM by using"},{"line_number":259,"context_line":"   X509 certificates in place of SSH keys."},{"line_number":260,"context_line":""},{"line_number":261,"context_line":"   From a practical perspective, X509 certificates are used by WinRM in a way"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_01cd5fb6","line":258,"updated":"2015-12-08 10:55:10.000000000","message":"s/natively/native/","commit_id":"ae44dc5a3a34e7a63251e235038205c162e258d3"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"284af8c4530836349ff40d32a5e5972c8925bbf6","unresolved":false,"context_lines":[{"line_number":261,"context_line":"   From a practical perspective, X509 certificates are used by WinRM in a way"},{"line_number":262,"context_line":"   which can be considered consistent with the usage of SSH keys on Linux,"},{"line_number":263,"context_line":"   as both are based on public / private keypairs."},{"line_number":264,"context_line":""},{"line_number":265,"context_line":"   Nova service \"nova-cert\" handles the management of X509 certificates and"},{"line_number":266,"context_line":"   which is used to generate certificates for euca-bundle-image."},{"line_number":267,"context_line":"   Only needed for EC2 API."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_dccfef27","line":264,"updated":"2015-12-09 15:46:44.000000000","message":"This last paragraph, is the only one we need, I think?\nhttp://docs.openstack.org/developer/nova/man/nova-cert.html#description","commit_id":"ae44dc5a3a34e7a63251e235038205c162e258d3"},{"author":{"_account_id":6062,"name":"jichenjc","email":"jichenjc@cn.ibm.com","username":"jichenjc"},"change_message_id":"6f8769d96507c0f401abba6510dea8cf86091ca3","unresolved":false,"context_lines":[{"line_number":262,"context_line":"   which can be considered consistent with the usage of SSH keys on Linux,"},{"line_number":263,"context_line":"   as both are based on public / private keypairs."},{"line_number":264,"context_line":""},{"line_number":265,"context_line":"   Nova service \"nova-cert\" handles the management of X509 certificates and"},{"line_number":266,"context_line":"   which is used to generate certificates for euca-bundle-image."},{"line_number":267,"context_line":"   Only needed for EC2 API."},{"line_number":268,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_616a2383","line":265,"updated":"2015-12-08 10:55:10.000000000","message":"remove \u0027and\u0027","commit_id":"ae44dc5a3a34e7a63251e235038205c162e258d3"},{"author":{"_account_id":6062,"name":"jichenjc","email":"jichenjc@cn.ibm.com","username":"jichenjc"},"change_message_id":"6f8769d96507c0f401abba6510dea8cf86091ca3","unresolved":false,"context_lines":[{"line_number":264,"context_line":""},{"line_number":265,"context_line":"   Nova service \"nova-cert\" handles the management of X509 certificates and"},{"line_number":266,"context_line":"   which is used to generate certificates for euca-bundle-image."},{"line_number":267,"context_line":"   Only needed for EC2 API."},{"line_number":268,"context_line":""},{"line_number":269,"context_line":"Relationship with Volume API"},{"line_number":270,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a740942_e10cd3ed","line":267,"updated":"2015-12-08 10:55:10.000000000","message":"s/for/by/","commit_id":"ae44dc5a3a34e7a63251e235038205c162e258d3"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"c933f8b8037c1349b30d53b95134799b55859a3f","unresolved":false,"context_lines":[{"line_number":249,"context_line":"-  **Certificates**"},{"line_number":250,"context_line":""},{"line_number":251,"context_line":"   Windows supports native password-less authentication for WinRM by using"},{"line_number":252,"context_line":"   X509 certificates in place of SSH keys."},{"line_number":253,"context_line":""},{"line_number":254,"context_line":"   Nova service \"nova-cert\" handles the management of X509 certificates which"},{"line_number":255,"context_line":"   is used to generate certificates for euca-bundle-image."}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a740942_00d87d1c","line":252,"updated":"2015-12-10 09:43:08.000000000","message":"I still not sure we want this here, as the X509 stuff in nova-cert is only used by the EC2 API, AFAIK?","commit_id":"f299ab8b8cbaf02bec036c5eb56feed1913bf3b3"},{"author":{"_account_id":14084,"name":"Einst Crazy","email":"yu.changcai@99cloud.net","username":"Einst"},"change_message_id":"1d8087305c7ee0938e635a9bc21ba740c38335a6","unresolved":false,"context_lines":[{"line_number":252,"context_line":"   X509 certificates in place of SSH keys."},{"line_number":253,"context_line":""},{"line_number":254,"context_line":"   Nova service \"nova-cert\" handles the management of X509 certificates which"},{"line_number":255,"context_line":"   is used to generate certificates for euca-bundle-image."},{"line_number":256,"context_line":"   Only needed for EC2 API."},{"line_number":257,"context_line":""},{"line_number":258,"context_line":"Relationship with Volume API"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a740942_48ba3c70","line":255,"updated":"2015-12-10 03:23:47.000000000","message":"are ?","commit_id":"f299ab8b8cbaf02bec036c5eb56feed1913bf3b3"},{"author":{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},"change_message_id":"12446332d4a7e502d1cc34966937e7b61b4a70cc","unresolved":false,"context_lines":[{"line_number":250,"context_line":""},{"line_number":251,"context_line":"   Nova service \"nova-cert\" handles the management of X509 certificates which"},{"line_number":252,"context_line":"   are used to generate certificates for euca-bundle-image."},{"line_number":253,"context_line":"   Only needed for EC2 API."},{"line_number":254,"context_line":""},{"line_number":255,"context_line":"Relationship with Volume API"},{"line_number":256,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5a710552_9ffcda3f","line":253,"updated":"2015-12-15 12:04:24.000000000","message":"I\u0027m not sure that nova-cert is only used for the ec2 api, we also use it for keypair generation.","commit_id":"ee8e2b52f8f85591d9f692240d93d3dbd5ed38b3"},{"author":{"_account_id":782,"name":"John Garbutt","email":"john@johngarbutt.com","username":"johngarbutt"},"change_message_id":"daf5a488b88b75c9b4894478b350e3ada4e845d8","unresolved":false,"context_lines":[{"line_number":250,"context_line":""},{"line_number":251,"context_line":"   Nova service \"nova-cert\" handles the management of X509 certificates which"},{"line_number":252,"context_line":"   are used to generate certificates for euca-bundle-image."},{"line_number":253,"context_line":"   Only needed for EC2 API."},{"line_number":254,"context_line":""},{"line_number":255,"context_line":"Relationship with Volume API"},{"line_number":256,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5a710552_df0ca244","line":253,"in_reply_to":"5a710552_9ffcda3f","updated":"2015-12-15 12:08:01.000000000","message":"We maybe should, but not sure we do:\nhttps://github.com/openstack/nova/blob/master/nova/compute/api.py#L3780","commit_id":"ee8e2b52f8f85591d9f692240d93d3dbd5ed38b3"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"e9d08fe9e09b3120e1700383ba032890cb722568","unresolved":false,"context_lines":[{"line_number":250,"context_line":""},{"line_number":251,"context_line":"   Nova service \"nova-cert\" handles the management of X509 certificates which"},{"line_number":252,"context_line":"   are used to generate certificates for euca-bundle-image."},{"line_number":253,"context_line":"   Only needed for EC2 API."},{"line_number":254,"context_line":""},{"line_number":255,"context_line":"Relationship with Volume API"},{"line_number":256,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5a710552_c3001604","line":253,"in_reply_to":"5a710552_a8d639c3","updated":"2015-12-16 08:29:00.000000000","message":"Yes, you are right. Thanks. I will update","commit_id":"ee8e2b52f8f85591d9f692240d93d3dbd5ed38b3"},{"author":{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},"change_message_id":"48825320c208ade8ad24c8452875d7df3402ea60","unresolved":false,"context_lines":[{"line_number":250,"context_line":""},{"line_number":251,"context_line":"   Nova service \"nova-cert\" handles the management of X509 certificates which"},{"line_number":252,"context_line":"   are used to generate certificates for euca-bundle-image."},{"line_number":253,"context_line":"   Only needed for EC2 API."},{"line_number":254,"context_line":""},{"line_number":255,"context_line":"Relationship with Volume API"},{"line_number":256,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5a710552_a8d639c3","line":253,"in_reply_to":"5a710552_df0ca244","updated":"2015-12-15 13:19:39.000000000","message":"It\u0027s also used here - https://github.com/openstack/nova/blob/2dc5d9f8632c83c9bc7ee6871c6631edf69a5570/nova/api/openstack/compute/certificates.py#L36","commit_id":"ee8e2b52f8f85591d9f692240d93d3dbd5ed38b3"}]}