diff options
| author | Liem Nguyen <liem.m.nguyen@gmail.com> | 2012-05-23 18:16:50 +0000 |
|---|---|---|
| committer | Adam Young <ayoung@redhat.com> | 2012-07-03 17:26:34 -0400 |
| commit | abc7c47c18f54c33668e9862fac614b7ce1d6d0a (patch) | |
| tree | c3391d09de94271bd69a7dc59fa84234cb603aa7 /doc/source | |
| parent | 29be6d081df065e3075f963199641c59b23007cc (diff) | |
| download | python-keystoneclient-abc7c47c18f54c33668e9862fac614b7ce1d6d0a.tar.gz | |
Support 2-way SSL with Keystone server if it is configured to enforce
2-way SSL. See also https://review.openstack.org/#/c/7706/ for the
corresponding review for the 2-way SSL addition to Keystone.
Change-Id: If0cb46a43d663687396d93604a7139d85a4e7114
Diffstat (limited to 'doc/source')
| -rw-r--r-- | doc/source/shell.rst | 21 |
1 files changed, 20 insertions, 1 deletions
diff --git a/doc/source/shell.rst b/doc/source/shell.rst index f86af72..209d681 100644 --- a/doc/source/shell.rst +++ b/doc/source/shell.rst @@ -42,13 +42,32 @@ options, it is easier to just set them as environment variables: The OpenStack Identity API version. +.. envvar:: OS_CA_CERT + + The location for the CA truststore (PEM formatted) for this client. + +.. envvar:: OS_CERT + + The location for the keystore (PEM formatted) containing the public + key of this client. This keystore can also optionally contain the + private key of this client. + +.. envvar:: OS_KEY + + The location for the keystore (PEM formatted) containing the private + key of this client. This value can be empty if the private key is + included in the OS_CERT file. + For example, in Bash you'd use:: export OS_USERNAME=yourname export OS_PASSWORD=yadayadayada export OS_TENANT_NAME=myproject - export OS_AUTH_URL=http://example.com:5000/v2.0/ + export OS_AUTH_URL=http(s)://example.com:5000/v2.0/ export OS_IDENTITY_API_VERSION=2.0 + export OS_CA_CERT=/etc/keystone/yourca.pem + export OS_CERT=/etc/keystone/yourpublickey.pem + export OS_KEY=/etc/keystone/yourprivatekey.pem From there, all shell commands take the form:: |