OpenStack Summit November 2014 Paris

All eyes are on OpenStack security as this amazing product matures from DevTest plaything to enterprise grade cloud controller. One of the major pain points with securing OpenStack is deployment, configuration and support for SSL. Deploying a CA and integrating it with OpenStack services is hard enough, getting assurance from SSL and ensuring that the libraries using SSL are really working is nearly impossible. Most current guides ignore this part of the setup.

During our presentation we will unveil our solution to both of these problems. We present an open-source Ephemeral PKI system that sidesteps the revocation issues that plague most OpenStack deployments and provides a stateless, HA mechanism for providing certificate services to entire cloud infrastructures, supporting isolated deployments and multiple, per-service trust anchors. We hope this way deploying secure communication will become the norm rather than difficult add-on.