Ask Your Question
0

how to setup keystone and Swift with https (updated)

asked 2012-05-22 07:54:54 -0600

ning gravatar image

Is there any document on how to setup keystone and Swift with https/ssl ?

I follow the link here ( http://keystone.openstack.org/configuringservices.html (http://keystone.openstack.org/configu...) ), but it seems only work for http. Plus, I google the keyword "keystone swift https" or "keystone swift ssl", but could not find any useful information.

Please let me know if you happen to know how to setup keystone and Swift with https/ssl.

Thanks,

======================================================================================================

Sorry, ,my intention is to ask: how to let proxy server to accept the https requests from the user application ? I think this may involve some updates on the keystone configuration and proxy-server.conf

edit retag flag offensive close merge delete

3 answers

Sort by » oldest newest most voted
0

answered 2012-05-22 08:06:06 -0600

So which part you are asking about, to have keystone as ssl or swift as ssl (or the auth middleware as ssl) ?

edit flag offensive delete link more
0

answered 2012-05-22 19:24:33 -0600

ning gravatar image

Sorry, ,my intention is to ask: how to let proxy server to accept the https requests from the user application ? I think this may involve some updates on the keystone configuration and proxy-server.conf

edit flag offensive delete link more
0

answered 2012-05-22 19:34:32 -0600

On swift proxy we advise to use a software or hardware ssl LB. For software LB pound would do SSL for you and you just bind it in front of your Swift proxy.

For keystone you can have keystone run under Apache+mod_ssl see documentation here: http://adam.younglogic.com/2012/04/ke...

For the auth middleware it just a matter to run auth_protocol=https configuration variable.

These guys have written a guide for configuring OpenStack services (including the one you are listing) http://cssoss.wordpress.com/ , hopefully this should wrap up everything together for you.

There is no step by step howto AFAIK so you probably want to do some digging (and document it after ;))

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2012-05-22 07:54:54 -0600

Seen: 98 times

Last updated: May 22 '12