openstack/openstack-manuals
Code Issues Proposed changes
openstack-manuals/doc/config-reference/source/tables/nova-crypto.rst
Stephen Finucane 564f5330c3 [config-ref]: update nova config options for stable/ocata 
This significant rework occurs due to recent changes in the
openstack-doc-tools project.

There are some manual fixes to the following options, where invalid rST
was included. These have been fixed on nova master but still need to be
backported to stable/ocata. This will be done separately.

- block_device_allocate_retries_interval (DEFAULT)
- torrent_images (xenserver)

Change-Id: Ia6ecbf025f1a2de19db896d3d72412461603093b
Depends-On: I4ef80825598cc7d98a4046afd5b131484e5a3469
2017-03-20 16:57:29 +00:00

2.1 KiB
Raw Blame History

Description of crypto configuration options
Configuration option = Default value Description
user_cert_subject = /C=US/ST=California/O=OpenStack/OU=NovaDev/CN=%.16s-%.16s-%s (String) Subject for certificate for users, %s for project, user, timestamp
project_cert_subject = /C=US/ST=California/O=OpenStack/OU=NovaDev/CN=project-ca-%.16s-%s (String) Subject for certificate for projects, %s for project, timestamp

crl_file = crl.pem

(String) Filename of root Certificate Revocation List (CRL). This is a list of certificates that have been revoked, and therefore, entities presenting those (revoked) certificates should no longer be trusted.

Related options:

  • ca_path

ca_path = $state_path/CA

(String) Directory path where root CA is located.

Related options:

  • ca_file

ca_file = cacert.pem

(String) Filename of root CA (Certificate Authority). This is a container format and includes root certificates.

Possible values:

  • Any file name containing root CA, cacert.pem is default

Related options:

  • ca_path

keys_path = $state_path/keys

(String) Directory path where keys are located.

Related options:

  • key_file

key_file = private/cakey.pem

(String) Filename of a private key.

Related options:

  • keys_path
use_project_ca = False (Boolean) Option to enable/disable use of CA for each project.