documentation should advice against using pki_setup and ssl_setup

[Adam Young]

Both of these tools generate Self-signed CA certificates. As such, they are only appropriate for development deployments, and should be treated as such. While sites with mature PKI policies would recognize this, that majority of people new to Open Stack are not PKI experts, and are using the provided tools. The http://docs.openstack.org/developer/keystone/configuration.html#certificates-for-pki should state this clearly.

[Dolph Mathews (dolph)]

There should also be a description of both commands in --help to that effect:

$ keystone-manage pki_setup --help
usage: keystone-manage [db_sync|db_version|pki_setup|ssl_setup|token_flush] pki_setup
       [-h] [--keystone-user KEYSTONE_USER] [--keystone-group KEYSTONE_GROUP]

optional arguments:
  -h, --help show this help message and exit
  --keystone-user KEYSTONE_USER
  --keystone-group KEYSTONE_GROUP

$ keystone-manage ssl_setup --help
usage: keystone-manage [db_sync|db_version|pki_setup|ssl_setup|token_flush] ssl_setup
       [-h] [--keystone-user KEYSTONE_USER] [--keystone-group KEYSTONE_GROUP]

optional arguments:
  -h, --help show this help message and exit
  --keystone-user KEYSTONE_USER
  --keystone-group KEYSTONE_GROUP

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/103697

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/103697
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=bb34e70d04f336a58859a83abe17598672d308a9
Submitter: Jenkins
Branch: master

commit bb34e70d04f336a58859a83abe17598672d308a9
Author: Lance Bragstad <email address hidden>
Date: Mon Jun 30 18:14:51 2014 -0500

    Fix docs and scripts for pki_setup and ssl_setup

    Make sure we document that pki_setup and ssl_setup scripts are not
    recommended for production deployments.

    Closes-Bug: #1291366
    Change-Id: Ic0e163a7d54f7438b7963ed18a356137206dde8a