Documentation Keystone SSL configuration lack

[Marcos Lobo]

Trying to configuring SSL on OpenStack Havana I read the official documentation here https://github.com/openstack/keystone/blob/stable/havana/doc/source/configuration.rst#ssl

But I think that configuration is not enough to configure SSL on OpenStack.

As far I know, to configure SSL on OpenStack, besides the configuration above, it is necessary to modify endpoints protocol from "http" to "https" and this is not documented on the official SSL Configuration document.

Please, confirm if I'm wrong.

[Dolph Mathews (dolph)]

Marcos: that's certainly true, nice catch!

[Marcos Lobo (marcos-fermin-lobo)]

Thanks Dolph, always alert! ;)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/95545

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/99278

[Marcos Lobo (marcos-fermin-lobo)]

Why different patches for the same topic? https://review.openstack.org/#/c/95545/ https://review.openstack.org/#/c/99278

[OpenStack Infra (hudson-openstack)]

Change abandoned by Andre Naehring (<email address hidden>) on branch: master
Review: https://review.openstack.org/99278
Reason: Wrong commit ID, so this one is not correct.

[OpenStack Infra (hudson-openstack)]

Change abandoned by Andre Naehring (<email address hidden>) on branch: master
Review: https://review.openstack.org/95545
Reason: This has already been merged.

[Stefano Maffulli (smaffulli)]

It's not clear to me if this bug is solved or not. There were two patches https://review.openstack.org/#/c/95545/ https://review.openstack.org/#/c/99278 both abandoned. Can you help? low-hanging-fruit bugs are useful for Upstream Training.

[Steve Martinelli (stevemar)]

I think both patches are very out of date. There have been enhancements to the docs, but i think they could still use more work.

[Adam Young (ayoung)]

Since we are dropping support for Eventlet based deployments, continuing to document them is counterproductive. Please switch over to using Apache HTTPD.