Setup PKI for Keystone
Required for http://wiki.openstack.org/PKI
specifically Delegation and Scaling section
when complete, you should see certificates and keys in
/etc/keystone/ssl
The important files are:
/etc/keystone/ssl/private/signing_key.pem
/etc/keystone/ssl/certs/ca.pem
/etc/keystone/ssl/certs/signing_cert.pem
Change-Id: Iece395413af767042235d6e1cc0421879a810044
diff --git a/stack.sh b/stack.sh
index eb302cd..b21989b 100755
--- a/stack.sh
+++ b/stack.sh
@@ -1928,6 +1928,8 @@
# Set up the keystone database
$KEYSTONE_DIR/bin/keystone-manage db_sync
+ # set up certificates
+ $KEYSTONE_DIR/bin/keystone-manage pki_setup
# launch keystone and wait for it to answer before continuing
screen_it key "cd $KEYSTONE_DIR && $KEYSTONE_DIR/bin/keystone-all --config-file $KEYSTONE_CONF $KEYSTONE_LOG_CONFIG -d --debug"