CA code should be rewritten in Python

[Soren Hansen]

The CA code doesn't get install when running "python setup.py install". This renders an install of nova useless by default.

We can either fix up the CA code to let it live in the python path where the templates also (soon will) live and use $state_path/CA for its state, or we can move it all into Python.

[Thierry Carrez (ttx)]

Soren is working on the long-term fix, but we could use a short-term one. Unassigning so that someone else can work on it.

Workaround:
<soren> georgy_: As a temporary measure, you could probably just copy the CA direcotry from the tarball into /usr/local/lib/python2.6/dist-packages/nova-2011.1-py2.6.egg/
<georgy_> that worked thanks

[Thierry Carrez (ttx)]

Splitting bug in two. One is the rewrite CA code in Python (this bug), the other is the fix for current python setup.py install (bug 727794).

[Brian Waldon (bcwaldon)]

Can somebody revisit this bug and determine its validity?

[Tom Fifield (fifieldt)]

The code in nova/crypto.py still calls out to the commandline for openssl, so I assume this bug is still valid.

[Vish Ishaya (vishvananda)]

it is still valid, but I personally think it is fine to shell out. The python crypto libraries are a bit annoying.

[Sean Dague (sdague)]

moving to opinion. It's fine if someone wants to resurect this later, but we don't need to carry it in the tracker.