Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
First Last Prev Next    This bug is not in your last search results.
Bug 1432479 - [RFE] Providing key rotation for Fernet tokens
[RFE] Providing key rotation for Fernet tokens
Status: CLOSED ERRATA
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-common (Show other bugs)
12.0 (Pike)
Unspecified Unspecified
high Severity high
: Upstream M2
: 12.0 (Pike)
Assigned To: Toure Dunnon
Prasanth Anbalagan
: FutureFeature, Triaged
Depends On:
Blocks: 1442136 1469332
  Show dependency tree / graph
 
Reported: 2017-03-15 09:31 EDT by Keith Basil
Modified: 2018-02-05 14:04 EST (History)
11 users (show)

See Also:
Fixed In Version: openstack-tripleo-common-7.3.1-0.20170707111135.d8a74de.el7ost openstack-tripleo-heat-templates-7.0.0-0.20170706121722.el7ost
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2017-12-13 16:17:04 EST
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


External Trackers
Tracker ID Priority Status Summary Last Updated
OpenStack gerrit 473387 None None None 2017-06-21 12:25 EDT
OpenStack gerrit 473388 None None None 2017-06-21 12:23 EDT
OpenStack gerrit 473389 None None None 2017-06-21 12:24 EDT
OpenStack gerrit 473390 None None None 2017-06-21 12:24 EDT
OpenStack gerrit 474532 None None None 2017-06-21 12:26 EDT
OpenStack gerrit 474573 None None None 2017-06-21 12:26 EDT
OpenStack gerrit 474574 None None None 2017-06-21 12:25 EDT
OpenStack gerrit 475732 None None None 2017-06-21 12:28 EDT
Red Hat Product Errata RHEA-2017:3462 normal SHIPPED_LIVE Red Hat OpenStack Platform 12.0 Enhancement Advisory 2018-02-15 20:43:25 EST

  None (edit)
Description Keith Basil 2017-03-15 09:31:30 EDT 
The Fernet driver is not secure enough because we don't have keys rotations at this time.  The RFE here is to provide a solution to perform Keystone Fernet tokens rotation in a way that scales and is secure.
Comment 12 errata-xmlrpc 2017-12-13 16:17:04 EST 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2017:3462
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.