Hi Dirk,
On Tue, 9 Jul 2013 17:19:39 +0200
Dirk Müller
The corresponding entry seems to be "default_md" with the value "default". Change it to "md5" and it will work. And reduce the "default_days".
Well, md5 would be awful. "default" is a synonym of "sha1", but it was only added in openssl 0.9.9 it seems (which we don't have on SLE11 SP3). Sigh. I'll fix it.
thanks. How do you want to fix that? Upgrade openssl? Change the corresponding lines in the keystone source? If that's your choice, have a deeper look on nova which also uses sha1, just like python-keystoneclient and so on.
The default_days in gen_pki.sh should remain the way it is, it is just used for the testsuite.
That's correct, I mentioned it because of the usage of the test suite, which failed when not reducing the value in a quick and dirty way ;) Greetings, André -- André Naehring Linux Consultant & Trainer Mail: naehring@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537