OpenStack Identity (keystone)

  1. Bug #1872737
  2. Comment #5

Comment 5 for bug 1872737

Revision history for this message
kay (kay-diam) wrote : Re: Keystone doesn't check signature TTL of the EC2 credential auth method

Hi Colleen, thanks for a patch.

I noticed that you're referencing to "timestamp = credentials['params'].get('Timestamp')", which is not correct.

Currently timestamp is fetched from the headers' "X-Amz-Date": https://github.com/openstack/python-keystoneclient/blob/a9d01eef93eef576bcecabf54e86c3a7a49651c8/keystoneclient/contrib/ec2/utils.py#L197
If there is no headers "X-Amz-Date" element, logic should fallback to params["X-Amz-Date"].