openstack/barbican
Code Issues Proposed changes

Fix kmip plugin

Browse Source 
Add missing kmip configuration to barbican.conf. Also, type of `port`
should be int, this will not cause error, but better following the API.
See [1]

[1] https://github.com/OpenKMIP/PyKMIP/blob/master/kmip/pie/client.py#L60

Change-Id: Ib16fbdda38016aab13683eae24aa6dcd1af5805a
This commit is contained in:
Jeremy Liu 2016-12-23 11:37:25 +08:00
parent d4ef217519
commit 673455bd95
2 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
barbican/plugin/kmip_secret_store.py
View File

@ -56,12 +56,12 @@ kmip_opts = [
default='localhost',
help=u._('Address of the KMIP server')
),
cfg.StrOpt('port',
default='5696',
cfg.IntOpt('port',
default=5696,
help=u._('Port for the KMIP server'),
),
cfg.StrOpt('ssl_version',
default='PROTOCOL_TLSv1',
default='PROTOCOL_TLSv1_2',
help=u._('SSL version, maps to the module ssl\'s constants'),
),
cfg.StrOpt('ca_certs',

6
etc/barbican/barbican.conf
View File

@ -316,9 +316,9 @@ port = 5696
keyfile = '/path/to/certs/cert.key'
certfile = '/path/to/certs/cert.crt'
ca_certs = '/path/to/certs/LocalCA.crt'
# User friendly plugin name
# plugin_name = 'KMIP HSM'
ssl_version = 'PROTOCOL_TLSv1_2'
pkcs1_only = False
plugin_name = 'KMIP HSM'
# ================= Certificate plugin ===================