documentation_complete: true

prodtype: osp7

title: 'Check-Identity-03: is SSL enabled for Identity?'

description: |-
    OpenStack components communicate with each other using various protocols and the communication might involve sensitive or confidential data. An attacker may try to eavesdrop on the channel in order to get access to sensitive information. Thus all the components must communicate with each other using a secured communication protocol like HTTPS.
    <br />
    <br />
    Pass: If value of parameter enable under [ssl] section in /etc/keystone/keystone.conf is set to True.

    <br />
    <br />
    Fail: If value of parameter enable under [ssl] section is not set to True.

rationale: ""

severity: unknown
