keystone错误

mxh_0779

各位大神：
     小弟在安装openstack的时候在配置keystone的时候出错，还请大神赐教怎么解决，谢谢！
执行命令keystone --os-username=admin --os-password=admin --os-auth-url=http://192.168.110.116:35357/v2.0 token-get
报错为：Authorization Failed: Unable to sign token. (HTTP 500)

日志：[root@openstack-ctrl ~]# tail -f /var/log/keystone/keystone.log
2014-11-05 18:58:21.465 4971 TRACE keystone.token.providers.pki   File "/usr/lib/python2.6/site-packages/keystone/token/providers/pki.py", line 39, in _get_token_id
2014-11-05 18:58:21.465 4971 TRACE keystone.token.providers.pki     CONF.signing.keyfile)
2014-11-05 18:58:21.465 4971 TRACE keystone.token.providers.pki   File "/usr/lib/python2.6/site-packages/keystoneclient/common/cms.py", line 348, in cms_sign_token
2014-11-05 18:58:21.465 4971 TRACE keystone.token.providers.pki     output = cms_sign_data(text, signing_cert_file_name, signing_key_file_name)
2014-11-05 18:58:21.465 4971 TRACE keystone.token.providers.pki   File "/usr/lib/python2.6/site-packages/keystoneclient/common/cms.py", line 340, in cms_sign_data
2014-11-05 18:58:21.465 4971 TRACE keystone.token.providers.pki     raise subprocess.CalledProcessError(retcode, 'openssl')
2014-11-05 18:58:21.465 4971 TRACE keystone.token.providers.pki CalledProcessError: Command 'openssl' returned non-zero exit status 3
2014-11-05 18:58:21.465 4971 TRACE keystone.token.providers.pki
2014-11-05 18:58:21.471 4971 WARNING keystone.common.wsgi [-] Unable to sign token.
2014-11-05 18:58:21.476 4971 INFO eventlet.wsgi.server [-] 192.168.110.116 - - [05/Nov/2014 18:58:21] "POST /v2.0/tokens HTTP/1.1" 500 241 0.363407

jian040907

在使用PKI格式的token之前，需要执行keystone-manage pki-setup。