Further discussion on SSL in the Security Guide to explain additional ways to configure SSL

[Anne Gentle]

From Bryan Payne: There's lots of reasonable ways to configure SSL for OpenStack clouds. And I think that the list just got a little longer with the release of haproxy 1.5 ;-)

Whether an SSL proxy to terminate SSL connections is still the preferred option (as described in the current version of the Security Guide) is often asked.

But here's a blog post that covers some of the most accepted options

https://blog-nkinder.rhcloud.com/?p=7

I'm pretty sure Nathan will give permission for this discussion to be incorporated into the Security Guide, so check with him and then find a good place for this discussion. Now that <sidebar> is supported in our output, it might make sense to add the info as a sidebar.

[Bryan D. Payne (bdpayne)]

@priti-desai Are you still planning to do this? If not, could you move it to unassigned?

[Priti Desai (priti-desai)]

@bdpayne, Yup, I am still planning on adding this to the guide. Will have it added before the mid cycle meetup :)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/157550

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/157550
Committed: https://git.openstack.org/cgit/openstack/security-doc/commit/?id=c0d176054173e79b10b42889d396bccadcc1072c
Submitter: Jenkins
Branch: master

commit c0d176054173e79b10b42889d396bccadcc1072c
Author: Priti Desai <email address hidden>
Date: Thu Feb 19 14:02:47 2015 -0800

    Enhancement - Additional ways to configure SSL

    Guide today has decent coverage on secure communication, but
    Nathan K. recently (not that recently) published a blog post on
    various secure deployment models. Adding discussion on various
    deployment models from his blog into the guide.

    Change-Id: I207c58890a8cf9b3fb377c6d167037b6aae3d563
    Closes-Bug: #1334009
    Co-Authored-By: nkinder <email address hidden>