)]}'
{"specs/version0.5/tls-data-security-2.diag":[{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"0fdb0582212bee73210908b1a9ae6aea31b88103","unresolved":false,"context_lines":[{"line_number":1,"context_line":"seqdiag {"},{"line_number":2,"context_line":"    span_height \u003d 10;"},{"line_number":3,"context_line":"    activation \u003d none;"},{"line_number":4,"context_line":"    Barbican;"},{"line_number":5,"context_line":"    \u003d\u003d\u003d In Octavia \u003d\u003d\u003d"},{"line_number":6,"context_line":"    Octavia -\u003e \"Compute Driver\" [label\u003d\"Create new Amphora\"] {"},{"line_number":7,"context_line":"        \"Compute Driver\" -\u003e Nova [label\u003d\"Create instance\", note\u003d\"Ref Impl, ConfigDrive: Octavia Controller certificate and IP, and a generated/signed cert + private key\"];"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"3a961159_82d5cee6","line":4,"updated":"2014-12-18 21:29:36.000000000","message":"Should we enumerate the generation of the amphora TLS certificate / key (which happens prior to talking to the compute driver?","commit_id":"7717d411cef436954347becb39cf4efb9597b7a2"}],"specs/version0.5/tls-data-security.rst":[{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"0fdb0582212bee73210908b1a9ae6aea31b88103","unresolved":false,"context_lines":[{"line_number":55,"context_line":"2. Create a CertificateGenerator interface to generate certificates from CSRs."},{"line_number":56,"context_line":"When the controller creates an Amphora, it will generate a private key and a"},{"line_number":57,"context_line":"CSR, generate a signed certificate from the CSR, and include the private key"},{"line_number":58,"context_line":"and signed certificate in a ConfigDrive for the new Amphora. All future"},{"line_number":59,"context_line":"communications with the Amphora will do client certificate validation based on"},{"line_number":60,"context_line":"our (private) certificate authority."},{"line_number":61,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_e206921b","line":58,"updated":"2014-12-18 21:29:36.000000000","message":"Nit: As well as the controller CA cert/chain (on the config drive).","commit_id":"7717d411cef436954347becb39cf4efb9597b7a2"}]}