Document how to setup the client side of the keystone PKI setup using export OS_CACERT=

[Anne Gentle]

Need to document how to make PKI work on the client side in the CLI book.

Need to add CA_CERT location to your bashrc or localrc.

[Anne Gentle (annegentle)]

Is it OS_CACERT? DevStack does this:

https://github.com/openstack-dev/devstack/blob/master/openrc

[Leonard Packham (leonard-packham)]

# Set the pointer to our CA certificate chain. Harmless if TLS is not used.
export OS_CACERT=$INT_CA_DIR/ca-chain.pem

--------------

Looks like OS_CACERT is correct in devstack OS_CERT does not appear to work. !st time working on a bug. Is this in the Keystone CLI.doctree?

[Tom Fifield (fifieldt)]

Hi Leonard,

Are you still interested in working on this? Do you need help?

[Anne Gentle (annegentle)]

Hi Leonard, my guess is that OS_CACERT should be documented in the openstack-manuals/doc/user-guide source files for docs. This bug tracks docs there. Is that what you're asking?

[Anne Gentle (annegentle)]

There is some documentation in the python-keystoneclient repository, published to http://docs.openstack.org/developer/python-keystoneclient/shell.html

[Tom Fifield (fifieldt)]

De-assigning, as we have not heard from Leonard in a while. If this was done in error, please re-assign,

[Priti Desai (priti-desai)]

Its my first time working for the community. I am interested in starting with this kind of bug. Thanks

[Tom Fifield (fifieldt)]

Thanks for picking up the bug Priti - appreciated. Let us know if you need any help on the documentation Mailing List (http://wiki.openstack.org/MailingLists) or IRC channel https://wiki.openstack.org/wiki/IRC

[Tom Fifield (fifieldt)]

There's also a guide for first timers here: https://wiki.openstack.org/wiki/Documentation/HowTo/FirstTimers

[Priti Desai (priti-desai)]

Thanks Tom for those links. I did refer them and have setup my development environment.

I am guessing, this bug is asking to document OS_CACERT in keystone CLI. Should this change be made to any of the docbook files under doc/common/section_keystone*.xml or should the change be made to files under openstack-manuals/doc/user-guide/*.xml ?

-Thanks

[Anne Gentle (annegentle)]

Hi Priti, sorry it took so long to respond. I'd like it to be documented in doc/common/section_keystone*.xml and then put into the doc/user-guide as an xi:include statement. Let us know if you have any trouble finding placement or the syntax for xi:include. Thanks!

[Steven Deaton (sdeaton2)]

Priti - are you still actively working on this? There is no rush, but just wanted to see if I could help in any way or if you were still interested in taking this. Thanks.

[Tom Fifield (fifieldt)]

Since we haven't heard from Priti in a while, de-assigning. If this was done in error, please re-assign :)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/146823

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/146823
Committed: https://git.openstack.org/cgit/openstack/openstack-manuals/commit/?id=7e8861d76e34b635958b64289324bebe37bb22cc
Submitter: Jenkins
Branch: master

commit 7e8861d76e34b635958b64289324bebe37bb22cc
Author: Pedro Navarro <email address hidden>
Date: Tue Jan 13 12:09:54 2015 +0100

    Add documentation how to setup CLI credentials to use in PKI scenarios.

    This adds CACERT configuration to the credentials section used
    in the user guide section and in the CLI keystone section.

    Change-Id: Iff59b2c27b3704bdc878cc4c406d95db608de1d7
    Closes-Bug: #1163938

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-manuals 15.0.0 release.