Change 'secrete' to 'secret'

Removal of a spelling error.

Change-Id: If59dec6c226e86177019b665a5f0a0e5d42e6316
Update hacking to 0.9.x

Address some issues that came up because of hacking upgrade.
But ignoring H904 since the slashes are valid, as they are in
comments, not code.

Change-Id: Ie8a94fc71632e4130c2ec663a5c6d3f2042f8263
Closes-Bug: #1328469
Change cms_sign_data to use sha256 message digest

cms_sign_data was not passing the md parameter to openssl, so it was
using the default digest of sha1. Some security standards require a
SHA2 algorithm for the digest.

This if for security hardening.

SecurityImpact

Change-Id: Iff063149e1f12df69bbf9015222d09d798980872
Closes-Bug: #1362343
Extracting common code to private method

Created a private method to build URL queries.

Change-Id: Iaa480443e34073fa39d13d2452cd13c267a2bdd5
Redact x-subject-token from response headers

When you invoke any OpenStack API of any of the OpenStack services
e.g. glance, neutron, cinder, heat, ceilometer, nova, keystone
then it logs readable x-subject-token at the debug log level in the
respective log files.

Simply redacting the x-subject-token in keystone client response header
before logging it.

SecurityImpact
Closes-Bug: #1371355
Change-Id: Iac16c6358250677544761beea9f5c5d8ba29afac
Merge "Change 'secrete' to 'secret'"
Merge "Change cms_sign_data to use sha256 message digest"
Merge "Update hacking to 0.9.x"
Merge "Redact x-subject-token from response headers"
Log token with sha1

By logging the sha1 hash of the token, it can be tracked through
different services.

Closes-bug: #1329301
Change-Id: I9c338f6a418ab8dd34dbaaf918b0ea6e9cbe79d7
Explicit complaint about old OpenSSL when testing

Running the tests with an old version of OpenSSL
results in many tests breaking without any hints
of the real cause. This handles that explictly,
stopping execution whenever the version is older
than 1.0 and exiting with an informative message.

Co-Authored-By: Rodrigo Duarte Sousa <rodrigods@lsd.ufcg.edu.br>
Closes-Bug: 1225084

Change-Id: I55e151d3fb4ddbe5ee4bf64bfdc597b4da73f6bb
Merge "Extracting common code to private method"
Merge "Log token with sha1"
Use oslo.utils and oslo.serialization

Left timeutils and strutils in openstack/common since they are used in
openstack/common/apiclient and memorycache.

Change-Id: Idb5f09c159d907dfba84cd1f7501f650318af7d9
Docstrings should have :returns: everywhere.

Some of the docstrings have ``:return:`` instead of ``:returns:``
keyword. This patch fixes that and make it consistent.

Change-Id: I4321a63798ab9e2abdf0bbd716bf2b995be22ba3
Actually test interactive password prompt

* keystoneclient/tests/v2_0/test_shell.py
(ShellTests.test_user_create_password_prompt): Remove the password
from the calling environment and fake out the check for an
interactive terminal session so that the code which implements
password prompting will actually be exercised.

Change-Id: I46f45553995316c7d006a83897413d57e127e48c
Merge "Use oslo.utils and oslo.serialization"
Merge "Actually test interactive password prompt"
Merge "Explicit complaint about old OpenSSL when testing"