Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/allow-nss-for-crypto.

Description:

A variety of crypto providers are available, OpenSSL is the hard coded crypto provider in OpenStack at the moment. Some organizations prefer an alternate crypto provider, i.e. NSS (Network Security Services). This blue print lays out a mechanism to select a crypto provider via configuration, re-factor the code to permit alternate crytpo providers, maintain OpenSSL as the default crypto provider, implement NSS as an alternative, and finally move to in-process crypto library calls as opposed to forking sub-processes to perform crypto operations.

Specification URL (additional information):

https://wiki.openstack.org/wiki/AllowNSSForCrypto