commit c83a7e125fc1fea0370fffed37435097346befa6
author Dean Troyer <dtroyer@gmail.com> Thu Nov 29 11:47:58 2012 -0600
committer Dean Troyer <dtroyer@gmail.com> Tue Dec 11 17:08:54 2012 -0600
tree e60b26a6a27d9a940105754677da18743367999c
parent 00626a3186650fb111d9af5e2d69311aa5b3d3c2

Add TLS support for keystone via proxy

* Adds lib/tls to create test CA/certs
* Start proxy if 'tls-proxy' is enabled
* Configure keystone service catalog for TLS
* Tear down proxy in unstack.sh
* Set auth protocol and ca-cert chain in openrc
* Add DATA_DIR to stackrc

This is the first in a series of patches to enable TLS support
for the service API endpoints.

Change-Id: Ia1c91dc8f1aaf94fbec9dc71da322559a83d14b6

unstack.sh

diff --git a/unstack.sh b/unstack.sh
index 34195c2..09e0de6 100755
--- a/unstack.sh
+++ b/unstack.sh
@@ -62,6 +62,11 @@
     stop_horizon
 fi
 
+# Kill TLS proxies
+if is_service_enabled tls-proxy; then
+    killall stud
+fi
+
 SCSI_PERSIST_DIR=$CINDER_STATE_PATH/volumes/*
 
 # Get the iSCSI volumes