<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/openstack/python-keystoneclient.git/examples/pki/cms/revocation_list.json, branch stable/kilo</title>
<subtitle>opendev.org: openstack/python-keystoneclient.git
</subtitle>
<link rel='alternate' type='text/html' href='http://91.123.203.49/cgit/delta/openstack/python-keystoneclient.git/'/>
<entry>
<title>Add data to example data</title>
<updated>2015-02-09T19:01:40+00:00</updated>
<author>
<name>Adam Young</name>
<email>ayoung@redhat.com</email>
</author>
<published>2015-01-29T23:13:06+00:00</published>
<link rel='alternate' type='text/html' href='http://91.123.203.49/cgit/delta/openstack/python-keystoneclient.git/commit/?id=44c1b73b3dce96271afa8dc216b545f403d9bfd0'/>
<id>44c1b73b3dce96271afa8dc216b545f403d9bfd0</id>
<content type='text'>
This commit adds issued_at values, role IDs, and fixes endpoints
in the example data.

Change-Id: I3e2a2296d08a34331b1afd02126445d0206eea7a
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This commit adds issued_at values, role IDs, and fixes endpoints
in the example data.

Change-Id: I3e2a2296d08a34331b1afd02126445d0206eea7a
</pre>
</div>
</content>
</entry>
<entry>
<title>Example JSON files should be human-readable</title>
<updated>2014-07-22T15:50:21+00:00</updated>
<author>
<name>Harry Rybacki</name>
<email>hrybacki@redhat.com</email>
</author>
<published>2014-07-19T21:32:31+00:00</published>
<link rel='alternate' type='text/html' href='http://91.123.203.49/cgit/delta/openstack/python-keystoneclient.git/commit/?id=b178fccb732c93f254bed0c7e66e8e0ee4280de9'/>
<id>b178fccb732c93f254bed0c7e66e8e0ee4280de9</id>
<content type='text'>
Change-Id: Ic408dd3935818adbef3ff4baa7c9699e4f07814e
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Change-Id: Ic408dd3935818adbef3ff4baa7c9699e4f07814e
</pre>
</div>
</content>
</entry>
<entry>
<title>Compressed Signature and Validation</title>
<updated>2014-05-09T18:48:17+00:00</updated>
<author>
<name>Adam Young</name>
<email>ayoung@redhat.com</email>
</author>
<published>2014-02-05T01:43:07+00:00</published>
<link rel='alternate' type='text/html' href='http://91.123.203.49/cgit/delta/openstack/python-keystoneclient.git/commit/?id=3d6d749e6f0fef682a88758e1a2f6c9e8e7bd23c'/>
<id>3d6d749e6f0fef682a88758e1a2f6c9e8e7bd23c</id>
<content type='text'>
Allows for a new form of document signature.

pkiz_sign will take data and encode it in a string that starts with
the substring  "PKIZ_".  This prefix indicates that the data has been:
1) Signed via PKI in Crypto Message Syntax (CMS) in binary (DER) format
2) Compressed using zlib (comparable to gzip)
3) urlsafe-base64 decoded

This process is reversed to validate the data.

middleware/auth_token.py will be capable of validating Keystone
tokens that are marshalled in the new format.  The current existing
"PKI" tokens will continue to be identified with "MII", issued by
default, and validated as well.  It will require corresponding changes
on the Keystone server to issue the new token format.

A separate script for generating the sample
data used in the unit tests,
examples/pki/gen_cmsz.py,
also serves as an example of how to
call the API from Python code.

Some of the sample data for the old tests had to be regenerated. A
stray comma in one of the JSON files made for non-parsing JSON.

Blueprint: compress-tokens
Closes-Bug: #1255321

Change-Id: Ia9a66ba3742da0bcd58c4c096b28cc8a66ad6569
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Allows for a new form of document signature.

pkiz_sign will take data and encode it in a string that starts with
the substring  "PKIZ_".  This prefix indicates that the data has been:
1) Signed via PKI in Crypto Message Syntax (CMS) in binary (DER) format
2) Compressed using zlib (comparable to gzip)
3) urlsafe-base64 decoded

This process is reversed to validate the data.

middleware/auth_token.py will be capable of validating Keystone
tokens that are marshalled in the new format.  The current existing
"PKI" tokens will continue to be identified with "MII", issued by
default, and validated as well.  It will require corresponding changes
on the Keystone server to issue the new token format.

A separate script for generating the sample
data used in the unit tests,
examples/pki/gen_cmsz.py,
also serves as an example of how to
call the API from Python code.

Some of the sample data for the old tests had to be regenerated. A
stray comma in one of the JSON files made for non-parsing JSON.

Blueprint: compress-tokens
Closes-Bug: #1255321

Change-Id: Ia9a66ba3742da0bcd58c4c096b28cc8a66ad6569
</pre>
</div>
</content>
</entry>
<entry>
<title>Add auth-token code to keystoneclient, along with supporting files</title>
<updated>2012-11-12T19:40:21+00:00</updated>
<author>
<name>Henry Nash</name>
<email>henryn@linux.vnet.ibm.com</email>
</author>
<published>2012-11-12T19:40:21+00:00</published>
<link rel='alternate' type='text/html' href='http://91.123.203.49/cgit/delta/openstack/python-keystoneclient.git/commit/?id=7920899af119d1697c333d202ca3272f167c19b0'/>
<id>7920899af119d1697c333d202ca3272f167c19b0</id>
<content type='text'>
This step in the process duplicates the auth-token code to keystoneclient but,
for the moment, leaves a copy in its origional location in keystone.
Testing for auth-token is also copied across, as is the cms support file.

Although no other project will yet pick up the code here in the client, since
the paste.ini files haev not yet been updated, it would work if anyone
did reference it.

Once the client code is in, the next step is to update all the other
project paste files, and then finally retire the code from keystone.

Change-Id: I88853a373d406020d54b61cba5a5e887380e3b3e
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This step in the process duplicates the auth-token code to keystoneclient but,
for the moment, leaves a copy in its origional location in keystone.
Testing for auth-token is also copied across, as is the cms support file.

Although no other project will yet pick up the code here in the client, since
the paste.ini files haev not yet been updated, it would work if anyone
did reference it.

Once the client code is in, the next step is to update all the other
project paste files, and then finally retire the code from keystone.

Change-Id: I88853a373d406020d54b61cba5a5e887380e3b3e
</pre>
</div>
</content>
</entry>
</feed>
