..
    Warning: Do not edit this file. It is automatically generated from the
    software project's code and your changes will be overwritten.

    The tool to generate this file lives in openstack-doc-tools repository.

    Please make any changes needed in the code, then run the
    autogenerate-config-doc tool from the openstack-doc-tools repository, or
    ask for help on the documentation mailing list, IRC channel or meeting.

.. _nova-crypto:

.. list-table:: Description of crypto configuration options
   :header-rows: 1
   :class: config-ref-table

   * - Configuration option = Default value
     - Description

   * - ``user_cert_subject`` = ``/C=US/ST=California/O=OpenStack/OU=NovaDev/CN=%.16s-%.16s-%s``

     - (String) Subject for certificate for users, %s for project, user, timestamp

   * - ``project_cert_subject`` = ``/C=US/ST=California/O=OpenStack/OU=NovaDev/CN=project-ca-%.16s-%s``

     - (String) Subject for certificate for projects, %s for project, timestamp

   * - ``crl_file`` = ``crl.pem``

     - (String) Filename of root Certificate Revocation List (CRL). This is a list of certificates that have been revoked, and therefore, entities presenting those (revoked) certificates should no longer be trusted.

       Related options:

       * ca_path

   * - ``ca_path`` = ``$state_path/CA``

     - (String) Directory path where root CA is located.

       Related options:

       * ca_file

   * - ``ca_file`` = ``cacert.pem``

     - (String) Filename of root CA (Certificate Authority). This is a container format and includes root certificates.

       Possible values:

       * Any file name containing root CA, cacert.pem is default

       Related options:

       * ca_path

   * - ``keys_path`` = ``$state_path/keys``

     - (String) Directory path where keys are located.

       Related options:

       * key_file

   * - ``key_file`` = ``private/cakey.pem``

     - (String) Filename of a private key.

       Related options:

       * keys_path

   * - ``use_project_ca`` = ``False``

     - (Boolean) Option to enable/disable use of CA for each project.