This whole section talks in several places about using a "private key"  but in fact what is stored in Barbican is a certificate. I think the text of this section should be revisited and distinguish when it should talk about a certificate versus when it should talk about a private key.

Shouldn't we also address the question of certificate expiration and what must be done when the certificate used to sign an image expires?

Thanks.


Reported by: fherrman

https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/manage_secrets_with_openstack_key_manager/validate_glance_images#annotations:1b1a2526-9c02-42bc-a8aa-4b15f886c88a