Charles Neill dce0c69220 Removing signing_dir directive from config ...

The signing_dir directive defined in barbican-api-paste.ini explicitly
stores Keystone's signing certificates in a known /tmp directory. This
could be exploited by populating the directory with bogus certificates,
potentially allowing a malicious user to generate valid tokens.

Added comment explaining signing_dir, and a reasonable
(commented) default.

Change-Id: I15fda6863e888e3881694ab47a836eee2fb578ee
Closes-Bug: #1446406

2015-04-23 17:31:23 -05:00

..

barbican

Removing signing_dir directive from config

2015-04-23 17:31:23 -05:00

init

Adding keystone notification listener support

2014-10-07 16:09:09 -07:00

logrotate.d

Added barbican-api rpm packaging.

2013-07-08 18:05:38 -05:00