Has anyone successfully configured an external Ceph Rados GW to work with keystone? Looking at the docs for Ceph it looks like i have to convert certificates to the nss db format,
mkdir /var/ceph/nss
openssl x509 -in /etc/keystone/ssl/certs/ca.pem -pubkey | \ certutil -d /var/ceph/nss -A -n ca -t "TCu,Cu,Tuw"
openssl x509 -in /etc/keystone/ssl/certs/signing_cert.pem -pubkey | \ certutil -A -d /var/ceph/nss -n signing_cert -t "P,P,P"
but i'm not sure where to acquire these certs in VIO 5.1