openstack/keystone
Code Issues Proposed changes

Deprecate hash_algorithm config option

Browse Source 
The PKI and PKIz drivers are now deprecated, but one of the
config options that only works for PKI has not been deprecated.

implements bp: deprecated-as-of-mitaka

Change-Id: I55d5fb2a2678dccd8638b0460921ba6f8e76da6a
This commit is contained in:
Steve Martinelli 2015-12-11 02:22:08 -05:00
parent 146a45bfde
commit 9ebbcac6f8
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
keystone/common/config.py
View File

@ -295,6 +295,10 @@ FILE_OPTIONS = {
'allow_rescoped_scoped_token to false prevents a user '
'from exchanging a scoped token for any other token.'),
cfg.StrOpt('hash_algorithm', default='md5',
deprecated_for_removal=True,
deprecated_reason='PKI token support has been deprecated '
'in the M release and will be removed '
'in the O release.',
help='The hash algorithm to use for PKI tokens. This can '
'be set to any algorithm that hashlib supports. '
'WARNING: Before changing this value, the auth_token '

4
releasenotes/notes/deprecated-as-of-mitaka-8534e43fa40c1d09.yaml
View File

@ -3,4 +3,6 @@ deprecations:
- >
[`blueprint deprecated-as-of-mitaka <https://blueprints.launchpad.net/keystone/+spec/deprecated-as-of-mitaka>`_]
As of the Mitaka release, the PKI and PKIz token formats have been
deprecated. They will be removed in the 'O' release.
deprecated. They will be removed in the 'O' release. Due to this change,
the ``hash_algorithm`` option in the ``[token]`` section of the
configuration file has also been deprecated.