Comment 4 for bug 980864

This is fixed on master https://github.com/openstack/keystone/commit/8de61f8af43563b1d93291c868634810d9e42902
but as a new feature isn't appropriate for stable/essex (see http://wiki.openstack.org/StableBranch#Appropriate_Fixes )
Alternative for stable/essex deployments is to use SSL termination in front of services as suggested in previous comments.