)]}'
{"security-guide/source/identity/checklist.rst":[{"author":{"_account_id":9162,"name":"Lana Brindley","email":"openstack@lanabrindley.com","username":"loquacity"},"change_message_id":"1ced409b72160c33bf7cea3da1bbb52d782ea975","unresolved":false,"context_lines":[{"line_number":67,"context_line":"each other using a secured communication protocol like HTTPS."},{"line_number":68,"context_line":""},{"line_number":69,"context_line":"**Pass:** If value of parameter ``enable`` under ``[ssl]`` section in"},{"line_number":70,"context_line":":file:`/etc/keystone/keystone.conf` is set to ``True``."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"**Fail:** If value of parameter ``enable`` under ``[ssl]`` section is"},{"line_number":73,"context_line":"not set to ``True``."}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa69d971_9564ca49","line":70,"range":{"start_line":70,"start_character":39,"end_line":70,"end_character":42},"updated":"2016-01-08 00:25:03.000000000","message":"Is this test still valid for TLS?","commit_id":"03dea27f55e3b39f90f5268bf8110d80dbe10239"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"7bdcd2c1a1041ee47509a1ce58f93c949f2672b0","unresolved":false,"context_lines":[{"line_number":67,"context_line":"each other using a secured communication protocol like HTTPS."},{"line_number":68,"context_line":""},{"line_number":69,"context_line":"**Pass:** If value of parameter ``enable`` under ``[ssl]`` section in"},{"line_number":70,"context_line":":file:`/etc/keystone/keystone.conf` is set to ``True``."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"**Fail:** If value of parameter ``enable`` under ``[ssl]`` section is"},{"line_number":73,"context_line":"not set to ``True``."}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa69d971_a6587157","line":70,"range":{"start_line":70,"start_character":39,"end_line":70,"end_character":42},"in_reply_to":"fa69d971_9564ca49","updated":"2016-01-08 21:31:53.000000000","message":"actually, it looks like the current master and stable/liberty versions of keystone has this setting under the [eventlet_server_ssl] section. [ssl]/enable is marked as deprecated.","commit_id":"03dea27f55e3b39f90f5268bf8110d80dbe10239"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"d45a371d34758ada2a68c6b233224047017e337c","unresolved":false,"context_lines":[{"line_number":67,"context_line":"each other using a secured communication protocol like HTTPS."},{"line_number":68,"context_line":""},{"line_number":69,"context_line":"**Pass:** If value of parameter ``enable`` under ``[ssl]`` section in"},{"line_number":70,"context_line":":file:`/etc/keystone/keystone.conf` is set to ``True``."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"**Fail:** If value of parameter ``enable`` under ``[ssl]`` section is"},{"line_number":73,"context_line":"not set to ``True``."}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa69d971_1783a9cd","line":70,"range":{"start_line":70,"start_character":39,"end_line":70,"end_character":42},"in_reply_to":"fa69d971_a6587157","updated":"2016-01-08 22:53:12.000000000","message":"Oops. Thanks, Lana, Michael.","commit_id":"03dea27f55e3b39f90f5268bf8110d80dbe10239"},{"author":{"_account_id":12000,"name":"Ian Cordasco","email":"sigmavirus24@gmail.com","username":"sigmavirus24"},"change_message_id":"b2cbdb3ccd02ebd53bf9e68072c921ccd623e07a","unresolved":false,"context_lines":[{"line_number":66,"context_line":"sensitive information. Thus all the components must communicate with"},{"line_number":67,"context_line":"each other using a secured communication protocol like HTTPS."},{"line_number":68,"context_line":""},{"line_number":69,"context_line":"**Pass:** If value of parameter ``enable`` under ``[eventlet_server_ssl]``"},{"line_number":70,"context_line":"section in :file:`/etc/keystone/keystone.conf` is set to ``True``."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"**Fail:** If value of parameter ``enable`` under ``[eventlet_server_ssl]``"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da6ed579_b3e23f9e","line":69,"updated":"2016-01-12 16:25:32.000000000","message":"I agree with Eric. We should mention both or at least link to something for Apache.","commit_id":"ccf7d856c78739f2041a860f85a61d3b47c04396"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"f362994a32cb5d73ec8731fc12116a119b65c01a","unresolved":false,"context_lines":[{"line_number":66,"context_line":"sensitive information. Thus all the components must communicate with"},{"line_number":67,"context_line":"each other using a secured communication protocol like HTTPS."},{"line_number":68,"context_line":""},{"line_number":69,"context_line":"**Pass:** If value of parameter ``enable`` under ``[eventlet_server_ssl]``"},{"line_number":70,"context_line":"section in :file:`/etc/keystone/keystone.conf` is set to ``True``."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"**Fail:** If value of parameter ``enable`` under ``[eventlet_server_ssl]``"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa69d971_f5a4bf4b","line":69,"updated":"2016-01-10 04:56:56.000000000","message":"The keystone project is removing eventlet support in Mitaka in favor of apache/mod_wsgi.  So this reference is invalid.\n\nSee https://review.openstack.org/#/c/249486/","commit_id":"ccf7d856c78739f2041a860f85a61d3b47c04396"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"e46e4de40c0cabc01a77e711c3b586494e0c0c6b","unresolved":false,"context_lines":[{"line_number":66,"context_line":"sensitive information. Thus all the components must communicate with"},{"line_number":67,"context_line":"each other using a secured communication protocol like HTTPS."},{"line_number":68,"context_line":""},{"line_number":69,"context_line":"**Pass:** If value of parameter ``enable`` under ``[eventlet_server_ssl]``"},{"line_number":70,"context_line":"section in :file:`/etc/keystone/keystone.conf` is set to ``True``."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"**Fail:** If value of parameter ``enable`` under ``[eventlet_server_ssl]``"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa69d971_350b372c","line":69,"in_reply_to":"fa69d971_355d7747","updated":"2016-01-10 05:36:12.000000000","message":"Ok, but even in Liberty apache/wsgi was recommended over eventlet.  So I think it needs to be mentioned here somewhere.","commit_id":"ccf7d856c78739f2041a860f85a61d3b47c04396"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"8b8faefca6655f00bb65d859372ae04b50ae7181","unresolved":false,"context_lines":[{"line_number":66,"context_line":"sensitive information. Thus all the components must communicate with"},{"line_number":67,"context_line":"each other using a secured communication protocol like HTTPS."},{"line_number":68,"context_line":""},{"line_number":69,"context_line":"**Pass:** If value of parameter ``enable`` under ``[eventlet_server_ssl]``"},{"line_number":70,"context_line":"section in :file:`/etc/keystone/keystone.conf` is set to ``True``."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"**Fail:** If value of parameter ``enable`` under ``[eventlet_server_ssl]``"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa69d971_355d7747","line":69,"in_reply_to":"fa69d971_f5a4bf4b","updated":"2016-01-10 05:21:05.000000000","message":"I know it. However, this document covers Liberty, Kilo, and Juno as of now. I think this check item is needed for the eventlet user, which is deprecated, but supported.","commit_id":"ccf7d856c78739f2041a860f85a61d3b47c04396"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"f362994a32cb5d73ec8731fc12116a119b65c01a","unresolved":false,"context_lines":[{"line_number":69,"context_line":"**Pass:** If value of parameter ``enable`` under ``[eventlet_server_ssl]``"},{"line_number":70,"context_line":"section in :file:`/etc/keystone/keystone.conf` is set to ``True``."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"**Fail:** If value of parameter ``enable`` under ``[eventlet_server_ssl]``"},{"line_number":73,"context_line":"section is not set to ``True``."},{"line_number":74,"context_line":""},{"line_number":75,"context_line":"Recommended in: :doc:`../secure-communication`."}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa69d971_95646322","line":72,"updated":"2016-01-10 04:56:56.000000000","message":"Same","commit_id":"ccf7d856c78739f2041a860f85a61d3b47c04396"}],"security-guide/source/networking/checklist.rst":[{"author":{"_account_id":9162,"name":"Lana Brindley","email":"openstack@lanabrindley.com","username":"loquacity"},"change_message_id":"1ced409b72160c33bf7cea3da1bbb52d782ea975","unresolved":false,"context_lines":[{"line_number":121,"context_line":"section in :file:`/etc/neutron/neutron.conf` is set to ``True``."},{"line_number":122,"context_line":""},{"line_number":123,"context_line":"**Fail:** If value of parameter ``use_ssl`` under ``[DEFAULT]``"},{"line_number":124,"context_line":"section in :file:`/etc/neutron/neutron.conf` is set to ``False``."}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa69d971_35595e8f","line":124,"range":{"start_line":124,"start_character":31,"end_line":124,"end_character":38},"updated":"2016-01-08 00:25:03.000000000","message":"Same question here.","commit_id":"03dea27f55e3b39f90f5268bf8110d80dbe10239"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"7bdcd2c1a1041ee47509a1ce58f93c949f2672b0","unresolved":false,"context_lines":[{"line_number":121,"context_line":"section in :file:`/etc/neutron/neutron.conf` is set to ``True``."},{"line_number":122,"context_line":""},{"line_number":123,"context_line":"**Fail:** If value of parameter ``use_ssl`` under ``[DEFAULT]``"},{"line_number":124,"context_line":"section in :file:`/etc/neutron/neutron.conf` is set to ``False``."}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa69d971_b946564d","line":124,"range":{"start_line":124,"start_character":31,"end_line":124,"end_character":38},"in_reply_to":"fa69d971_35595e8f","updated":"2016-01-08 21:31:53.000000000","message":"as of stable/liberty, this assertion still seems to hold true","commit_id":"03dea27f55e3b39f90f5268bf8110d80dbe10239"}]}