)]}'
{"doc/admin-guide-cloud-rst/source/keystone_certificates_for_pki.rst":[{"author":{"_account_id":14962,"name":"ologvinova","email":"ologvinova@mirantis.com","username":"ologvinova"},"change_message_id":"dd133933dab2b8475e84144f1ac18763ee51a288","unresolved":false,"context_lines":[{"line_number":57,"context_line":"    Certificate subject (auto generated certificate) for token signing."},{"line_number":58,"context_line":"    Default is ``/C\u003dUS/ST\u003dUnset/L\u003dUnset/O\u003dUnset/CN\u003dwww.example.com``."},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"When generating certificates with the ``keystone-manage pki_setup``"},{"line_number":61,"context_line":"command, the ``ca_key``, ``key_size``, and ``valid_days`` configuration"},{"line_number":62,"context_line":"options are used."},{"line_number":63,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa32b979_9af8657e","line":60,"updated":"2015-06-22 10:05:40.000000000","message":"``keystone-manage pki_setup`` : I would use the markup :command:`keystone-manage pki_setup` here and in all the doc where applicable. It makes bold font (like in the original .xml file)","commit_id":"e3bf496129435be7f92e771e440955922a0475f7"},{"author":{"_account_id":9382,"name":"Shilla Saebi","email":"shilla.saebi@gmail.com","username":"shillasaebi"},"change_message_id":"af38017459ce6b5a090782ea6056baec2a734d24","unresolved":false,"context_lines":[{"line_number":14,"context_line":"be in the locations specified by the top level Identity Service"},{"line_number":15,"context_line":"configuration file :file:`keystone.conf` as specified in the above section."},{"line_number":16,"context_line":"Additionally, the private key should only be readable by the system user"},{"line_number":17,"context_line":"that will run the Identity Service."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":""},{"line_number":20,"context_line":".. warning::"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_a332920e","line":17,"updated":"2015-06-23 17:44:27.000000000","message":"and can you make this \"OpenStack Identity service\"\n\nfollowed from doc conventions: https://wiki.openstack.org/wiki/Documentation/Conventions\n\nService shouldn\u0027t be capitalized also","commit_id":"efcd198dc92c7d6ffcfc0e82e905266718f36983"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"1dc3a140eda4ddb928de9341b27056cb0322e342","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":"- ``certfile``"},{"line_number":35,"context_line":"    Location of certificate used to verify tokens. Default is"},{"line_number":36,"context_line":"    ``/etc/keystone/ssl/certs/signing_cert.pem``."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"-  ``keyfile``"},{"line_number":39,"context_line":"    Location of private key used to sign tokens. Default is"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_913edfd8","line":36,"updated":"2015-06-23 04:44:50.000000000","message":":file:/etc/keystone/ssl/certs/signing_cert.pem`","commit_id":"efcd198dc92c7d6ffcfc0e82e905266718f36983"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"1dc3a140eda4ddb928de9341b27056cb0322e342","unresolved":false,"context_lines":[{"line_number":37,"context_line":""},{"line_number":38,"context_line":"-  ``keyfile``"},{"line_number":39,"context_line":"    Location of private key used to sign tokens. Default is"},{"line_number":40,"context_line":"    ``/etc/keystone/ssl/private/signing_key.pem``."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"- ``ca_certs``"},{"line_number":43,"context_line":"    Location of certificate for the authority that issued"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_3126f3ce","line":40,"updated":"2015-06-23 04:44:50.000000000","message":"ditto","commit_id":"efcd198dc92c7d6ffcfc0e82e905266718f36983"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"1dc3a140eda4ddb928de9341b27056cb0322e342","unresolved":false,"context_lines":[{"line_number":41,"context_line":""},{"line_number":42,"context_line":"- ``ca_certs``"},{"line_number":43,"context_line":"    Location of certificate for the authority that issued"},{"line_number":44,"context_line":"    the above certificate. Default is ``/etc/keystone/ssl/certs/ca.pem``."},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"- ``ca_key``"},{"line_number":47,"context_line":"    Location of the private key used by the CA. Default is"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_f12f2b9f","line":44,"updated":"2015-06-23 04:44:50.000000000","message":"ditto","commit_id":"efcd198dc92c7d6ffcfc0e82e905266718f36983"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"1dc3a140eda4ddb928de9341b27056cb0322e342","unresolved":false,"context_lines":[{"line_number":45,"context_line":""},{"line_number":46,"context_line":"- ``ca_key``"},{"line_number":47,"context_line":"    Location of the private key used by the CA. Default is"},{"line_number":48,"context_line":"    ``/etc/keystone/ssl/private/cakey.pem``."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"- ``key_size``"},{"line_number":51,"context_line":"    Default is ``2048``."}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_b118c385","line":48,"updated":"2015-06-23 04:44:50.000000000","message":"ditto","commit_id":"efcd198dc92c7d6ffcfc0e82e905266718f36983"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"1dc3a140eda4ddb928de9341b27056cb0322e342","unresolved":false,"context_lines":[{"line_number":161,"context_line":"   $ openssl req -newkey rsa:1024 -keyout signing_key.pem -keyform PEM \\"},{"line_number":162,"context_line":"     -out signing_cert_req.pem -outform PEM -config cert_req.conf -nodes"},{"line_number":163,"context_line":""},{"line_number":164,"context_line":"If everything is successful, you should end up with ``signing_cert_req.pem``"},{"line_number":165,"context_line":"and ``signing_key.pem``. Send ``signing_cert_req.pem`` to your CA to request"},{"line_number":166,"context_line":"a token signing certificate and make sure to ask the certificate to be in PEM"},{"line_number":167,"context_line":"format. Also, make sure your trusted CA certificate chain is also in PEM"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_acff0800","line":164,"updated":"2015-06-23 04:44:50.000000000","message":"ditto","commit_id":"efcd198dc92c7d6ffcfc0e82e905266718f36983"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"1dc3a140eda4ddb928de9341b27056cb0322e342","unresolved":false,"context_lines":[{"line_number":162,"context_line":"     -out signing_cert_req.pem -outform PEM -config cert_req.conf -nodes"},{"line_number":163,"context_line":""},{"line_number":164,"context_line":"If everything is successful, you should end up with ``signing_cert_req.pem``"},{"line_number":165,"context_line":"and ``signing_key.pem``. Send ``signing_cert_req.pem`` to your CA to request"},{"line_number":166,"context_line":"a token signing certificate and make sure to ask the certificate to be in PEM"},{"line_number":167,"context_line":"format. Also, make sure your trusted CA certificate chain is also in PEM"},{"line_number":168,"context_line":"format."}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_cc028c09","line":165,"updated":"2015-06-23 04:44:50.000000000","message":"ditto x2","commit_id":"efcd198dc92c7d6ffcfc0e82e905266718f36983"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"1dc3a140eda4ddb928de9341b27056cb0322e342","unresolved":false,"context_lines":[{"line_number":172,"context_line":""},{"line_number":173,"context_line":"Assuming you have the following already:"},{"line_number":174,"context_line":""},{"line_number":175,"context_line":"- ``signing_cert.pem``"},{"line_number":176,"context_line":"    (Keystone token) signing certificate in PEM format"},{"line_number":177,"context_line":""},{"line_number":178,"context_line":"- ``signing_key.pem``"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_6c09002c","line":175,"updated":"2015-06-23 04:44:50.000000000","message":"ditto","commit_id":"efcd198dc92c7d6ffcfc0e82e905266718f36983"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"1dc3a140eda4ddb928de9341b27056cb0322e342","unresolved":false,"context_lines":[{"line_number":175,"context_line":"- ``signing_cert.pem``"},{"line_number":176,"context_line":"    (Keystone token) signing certificate in PEM format"},{"line_number":177,"context_line":""},{"line_number":178,"context_line":"- ``signing_key.pem``"},{"line_number":179,"context_line":"    Corresponding (non-encrypted) private key in PEM format"},{"line_number":180,"context_line":""},{"line_number":181,"context_line":"- ``cacert.pem``"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_8c0c843c","line":178,"updated":"2015-06-23 04:44:50.000000000","message":"ditto","commit_id":"efcd198dc92c7d6ffcfc0e82e905266718f36983"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"1dc3a140eda4ddb928de9341b27056cb0322e342","unresolved":false,"context_lines":[{"line_number":178,"context_line":"- ``signing_key.pem``"},{"line_number":179,"context_line":"    Corresponding (non-encrypted) private key in PEM format"},{"line_number":180,"context_line":""},{"line_number":181,"context_line":"- ``cacert.pem``"},{"line_number":182,"context_line":"    Trust CA certificate chain in PEM format"},{"line_number":183,"context_line":""},{"line_number":184,"context_line":"Copy the above to your certificate directory. For example:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_4c0f5c2e","line":181,"updated":"2015-06-23 04:44:50.000000000","message":"ditto","commit_id":"efcd198dc92c7d6ffcfc0e82e905266718f36983"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"1dc3a140eda4ddb928de9341b27056cb0322e342","unresolved":false,"context_lines":[{"line_number":207,"context_line":"   needed, not just the key and cert files."},{"line_number":208,"context_line":""},{"line_number":209,"context_line":"If your certificate directory path is different from the default"},{"line_number":210,"context_line":"``/etc/keystone/ssl/certs``, make sure it is reflected in the"},{"line_number":211,"context_line":"``[signing]`` section of the configuration file."},{"line_number":212,"context_line":""},{"line_number":213,"context_line":"Switching out expired signing certificates"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_6c20209c","line":210,"updated":"2015-06-23 04:44:50.000000000","message":"ditto","commit_id":"efcd198dc92c7d6ffcfc0e82e905266718f36983"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"687a64d3a32b63c39207b37192d548ec55705d25","unresolved":false,"context_lines":[{"line_number":46,"context_line":""},{"line_number":47,"context_line":"- ``ca_key``"},{"line_number":48,"context_line":"    Location of the private key used by the CA. Default is"},{"line_number":49,"context_line":"    :file:`/etc/keystone/ssl/private/cakey.pem``."},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"- ``key_size``"},{"line_number":52,"context_line":"    Default is ``2048``."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_51b82211","line":49,"updated":"2015-06-24 01:48:19.000000000","message":":file:`/etc/keystone/ssl/private/cakey.pem`\n\nneed just 1 backtick.","commit_id":"81efc87a0717cb1106306d36215156a9c24ced98"},{"author":{"_account_id":10705,"name":"Darren Chan","email":"dazzachan@yahoo.com.au","username":"daz"},"change_message_id":"7a74e70aa7e0f4c220133adf0130027c90f208b6","unresolved":false,"context_lines":[{"line_number":46,"context_line":""},{"line_number":47,"context_line":"- ``ca_key``"},{"line_number":48,"context_line":"    Location of the private key used by the CA. Default is"},{"line_number":49,"context_line":"    :file:`/etc/keystone/ssl/private/cakey.pem``."},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"- ``key_size``"},{"line_number":52,"context_line":"    Default is ``2048``."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_f49b64c7","line":49,"in_reply_to":"fa32b979_51b82211","updated":"2015-06-24 02:24:21.000000000","message":"Done","commit_id":"81efc87a0717cb1106306d36215156a9c24ced98"},{"author":{"_account_id":10705,"name":"Darren Chan","email":"dazzachan@yahoo.com.au","username":"daz"},"change_message_id":"7a74e70aa7e0f4c220133adf0130027c90f208b6","unresolved":false,"context_lines":[{"line_number":162,"context_line":"   $ openssl req -newkey rsa:1024 -keyout signing_key.pem -keyform PEM \\"},{"line_number":163,"context_line":"     -out signing_cert_req.pem -outform PEM -config cert_req.conf -nodes"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"If everything is successful, you should end up with "},{"line_number":166,"context_line":":file:`signing_cert_req.pem`and :file:`signing_key.pem``. Send"},{"line_number":167,"context_line":":file:`signing_cert_req.pem` to your CA to request a token signing certificate"},{"line_number":168,"context_line":"and make sure to ask the certificate to be in PEM format. Also, make sure your"}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_34b6ac3e","line":165,"updated":"2015-06-24 02:24:21.000000000","message":"whitespace fixed.","commit_id":"81efc87a0717cb1106306d36215156a9c24ced98"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"687a64d3a32b63c39207b37192d548ec55705d25","unresolved":false,"context_lines":[{"line_number":163,"context_line":"     -out signing_cert_req.pem -outform PEM -config cert_req.conf -nodes"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"If everything is successful, you should end up with "},{"line_number":166,"context_line":":file:`signing_cert_req.pem`and :file:`signing_key.pem``. Send"},{"line_number":167,"context_line":":file:`signing_cert_req.pem` to your CA to request a token signing certificate"},{"line_number":168,"context_line":"and make sure to ask the certificate to be in PEM format. Also, make sure your"},{"line_number":169,"context_line":"trusted CA certificate chain is also in PEM format."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_f137f6ad","line":166,"updated":"2015-06-24 01:48:19.000000000","message":"ditto","commit_id":"81efc87a0717cb1106306d36215156a9c24ced98"},{"author":{"_account_id":10705,"name":"Darren Chan","email":"dazzachan@yahoo.com.au","username":"daz"},"change_message_id":"7a74e70aa7e0f4c220133adf0130027c90f208b6","unresolved":false,"context_lines":[{"line_number":163,"context_line":"     -out signing_cert_req.pem -outform PEM -config cert_req.conf -nodes"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"If everything is successful, you should end up with "},{"line_number":166,"context_line":":file:`signing_cert_req.pem`and :file:`signing_key.pem``. Send"},{"line_number":167,"context_line":":file:`signing_cert_req.pem` to your CA to request a token signing certificate"},{"line_number":168,"context_line":"and make sure to ask the certificate to be in PEM format. Also, make sure your"},{"line_number":169,"context_line":"trusted CA certificate chain is also in PEM format."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_14a128f8","line":166,"in_reply_to":"fa32b979_f137f6ad","updated":"2015-06-24 02:24:21.000000000","message":"Done","commit_id":"81efc87a0717cb1106306d36215156a9c24ced98"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"687a64d3a32b63c39207b37192d548ec55705d25","unresolved":false,"context_lines":[{"line_number":208,"context_line":"   needed, not just the key and cert files."},{"line_number":209,"context_line":""},{"line_number":210,"context_line":"If your certificate directory path is different from the default"},{"line_number":211,"context_line":":file:`/etc/keystone/ssl/certs``, make sure it is reflected in the"},{"line_number":212,"context_line":"``[signing]`` section of the configuration file."},{"line_number":213,"context_line":""},{"line_number":214,"context_line":"Switching out expired signing certificates"}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_d142f20e","line":211,"updated":"2015-06-24 01:48:19.000000000","message":"ditto","commit_id":"81efc87a0717cb1106306d36215156a9c24ced98"},{"author":{"_account_id":10705,"name":"Darren Chan","email":"dazzachan@yahoo.com.au","username":"daz"},"change_message_id":"7a74e70aa7e0f4c220133adf0130027c90f208b6","unresolved":false,"context_lines":[{"line_number":208,"context_line":"   needed, not just the key and cert files."},{"line_number":209,"context_line":""},{"line_number":210,"context_line":"If your certificate directory path is different from the default"},{"line_number":211,"context_line":":file:`/etc/keystone/ssl/certs``, make sure it is reflected in the"},{"line_number":212,"context_line":"``[signing]`` section of the configuration file."},{"line_number":213,"context_line":""},{"line_number":214,"context_line":"Switching out expired signing certificates"}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_d4a6600e","line":211,"in_reply_to":"fa32b979_d142f20e","updated":"2015-06-24 02:24:21.000000000","message":"Done","commit_id":"81efc87a0717cb1106306d36215156a9c24ced98"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"014c8d359dd3d3ba4f1bad3aec8c79984a4e1175","unresolved":false,"context_lines":[{"line_number":163,"context_line":"     -out signing_cert_req.pem -outform PEM -config cert_req.conf -nodes"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"If everything is successful, you should end up with"},{"line_number":166,"context_line":":file:`signing_cert_req.pem`and :file:`signing_key.pem`. Send"},{"line_number":167,"context_line":":file:`signing_cert_req.pem` to your CA to request a token signing certificate"},{"line_number":168,"context_line":"and make sure to ask the certificate to be in PEM format. Also, make sure your"},{"line_number":169,"context_line":"trusted CA certificate chain is also in PEM format."}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_347eacaf","line":166,"updated":"2015-06-24 02:51:53.000000000","message":"This isn\u0027t rendering quite right yet.  There is a space missing between req.pem`and\n\nShould be req.pem` and","commit_id":"94c427bf9f3fad340c48670e690b97760ab6fb47"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"96e3b7a31799ae92c5f582f2553154d9b6562327","unresolved":false,"context_lines":[{"line_number":23,"context_line":"   be. The private key should only be readable by the account that is"},{"line_number":24,"context_line":"   going to sign tokens. When generating files with the"},{"line_number":25,"context_line":"   :command:`keystone-manage pki_setup` command, your best option is to run"},{"line_number":26,"context_line":"   as the pki user. If you run ``keystone-manage`` as root, you can append"},{"line_number":27,"context_line":"   ``--keystone-user`` and ``--keystone-group`` parameters to set the"},{"line_number":28,"context_line":"   user name and group keystone is going to run under."},{"line_number":29,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_f8c112e5","line":26,"updated":"2015-06-24 09:49:24.000000000","message":"this should probably be --\u003e :command:`keystone-manage`","commit_id":"789788d451a0d89311bf4782a503b8dc52c0174c"},{"author":{"_account_id":10705,"name":"Darren Chan","email":"dazzachan@yahoo.com.au","username":"daz"},"change_message_id":"56f557675bebe3de2b0481709570fcb41515ce9d","unresolved":false,"context_lines":[{"line_number":23,"context_line":"   be. The private key should only be readable by the account that is"},{"line_number":24,"context_line":"   going to sign tokens. When generating files with the"},{"line_number":25,"context_line":"   :command:`keystone-manage pki_setup` command, your best option is to run"},{"line_number":26,"context_line":"   as the pki user. If you run ``keystone-manage`` as root, you can append"},{"line_number":27,"context_line":"   ``--keystone-user`` and ``--keystone-group`` parameters to set the"},{"line_number":28,"context_line":"   user name and group keystone is going to run under."},{"line_number":29,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_3fb2d206","line":26,"in_reply_to":"fa32b979_f8c112e5","updated":"2015-06-25 01:58:54.000000000","message":"Done","commit_id":"789788d451a0d89311bf4782a503b8dc52c0174c"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"96e3b7a31799ae92c5f582f2553154d9b6562327","unresolved":false,"context_lines":[{"line_number":24,"context_line":"   going to sign tokens. When generating files with the"},{"line_number":25,"context_line":"   :command:`keystone-manage pki_setup` command, your best option is to run"},{"line_number":26,"context_line":"   as the pki user. If you run ``keystone-manage`` as root, you can append"},{"line_number":27,"context_line":"   ``--keystone-user`` and ``--keystone-group`` parameters to set the"},{"line_number":28,"context_line":"   user name and group keystone is going to run under."},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"The values that specify where to read the certificates are under the"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_b86e2afe","line":27,"updated":"2015-06-24 09:49:24.000000000","message":"you can use the :option: here, to make it perfect \u003d)\n--\u003e :option:`--keystone-user` and :option:`--keystone-group`","commit_id":"789788d451a0d89311bf4782a503b8dc52c0174c"},{"author":{"_account_id":10705,"name":"Darren Chan","email":"dazzachan@yahoo.com.au","username":"daz"},"change_message_id":"56f557675bebe3de2b0481709570fcb41515ce9d","unresolved":false,"context_lines":[{"line_number":24,"context_line":"   going to sign tokens. When generating files with the"},{"line_number":25,"context_line":"   :command:`keystone-manage pki_setup` command, your best option is to run"},{"line_number":26,"context_line":"   as the pki user. If you run ``keystone-manage`` as root, you can append"},{"line_number":27,"context_line":"   ``--keystone-user`` and ``--keystone-group`` parameters to set the"},{"line_number":28,"context_line":"   user name and group keystone is going to run under."},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"The values that specify where to read the certificates are under the"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_5fb556ea","line":27,"in_reply_to":"fa32b979_b86e2afe","updated":"2015-06-25 01:58:54.000000000","message":"Done","commit_id":"789788d451a0d89311bf4782a503b8dc52c0174c"}],"doc/admin-guide-cloud-rst/source/keystone_configure_with_SSL.rst":[{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"be9d843e666e8d6565331e230551a4061660d06e","unresolved":false,"context_lines":[{"line_number":9,"context_line":"You must obtain the x509 certificates externally and configure them."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"The Identity service provides a set of sample certificates in the"},{"line_number":12,"context_line":"``examples/pki/certs`` and ``examples/pki/private`` directories:"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"cacert.pem"},{"line_number":15,"context_line":"    Certificate Authority chain to validate against."}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_6c0fc0e1","line":12,"updated":"2015-06-23 04:58:02.000000000","message":":file:`examples/pki/certs` and :file:`examples/pki/private`","commit_id":"efcd198dc92c7d6ffcfc0e82e905266718f36983"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"80c0b17c2df2e5d3b69e88a9dd0497e62c247b1d","unresolved":false,"context_lines":[{"line_number":9,"context_line":"You must obtain the x509 certificates externally and configure them."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"The Identity service provides a set of sample certificates in the"},{"line_number":12,"context_line":":file:`examples/pki/certs`` and :file:`examples/pki/private`` directories:"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"cacert.pem"},{"line_number":15,"context_line":"   Certificate Authority chain to validate against."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_6e78e3c4","line":12,"updated":"2015-06-24 01:32:20.000000000","message":"just a single ` at the end of each directory","commit_id":"81efc87a0717cb1106306d36215156a9c24ced98"},{"author":{"_account_id":10705,"name":"Darren Chan","email":"dazzachan@yahoo.com.au","username":"daz"},"change_message_id":"7a74e70aa7e0f4c220133adf0130027c90f208b6","unresolved":false,"context_lines":[{"line_number":9,"context_line":"You must obtain the x509 certificates externally and configure them."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"The Identity service provides a set of sample certificates in the"},{"line_number":12,"context_line":":file:`examples/pki/certs`` and :file:`examples/pki/private`` directories:"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"cacert.pem"},{"line_number":15,"context_line":"   Certificate Authority chain to validate against."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_f4828451","line":12,"in_reply_to":"fa32b979_6e78e3c4","updated":"2015-06-24 02:24:21.000000000","message":"Done","commit_id":"81efc87a0717cb1106306d36215156a9c24ced98"}]}