summaryrefslogtreecommitdiff
path: root/releasenotes/notes/bug-1649735-3c68f3243e474775.yaml
blob: a624c39a5b3a235097e9bd78befe839d0515e869 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
---
fixes:
  - >
    [`bug 1649735 <https://bugs.launchpad.net/keystone/+bug/1649735>`_]
    The auth_token middleware no longer attempts to retrieve the revocation
    list from the Keystone server. The deprecated options
    `revocations_cache_time` and `check_revocations_for_cached` have been
    removed.

    Keystone no longer issues PKI/PKIZ tokens and now keystonemiddleware's
    Support for PKI/PKIZ and associated offline validation has been removed.
    This includes the deprecated config options `signing_dir`, and
    `hash_algorithms`.

upgrade:
  - >
    [`bug 1649735 <https://bugs.launchpad.net/keystone/+bug/1649735>`_]
    Keystonemiddleware no longer supports PKI/PKIZ tokens, all
    associated offline validation has been removed. The configuration
    options `signing_dir`, and `hash_algorithms` have been removed, if
    they still exist in your configuration(s), they are now safe to remove.
    Please consider utilizing the newer fernet or JWS token formats.