keystone-manage pki_setup --keystone-user keystone --keystone-group keystone
2014-01-08 22:54:10.250 1883 INFO keystone.common.openssl [-] openssl genrsa -out /etc/keystone/pki/private/cakey.pem 2048
Generating RSA private key, 2048 bit long modulus
...........+++
.............................................................................................+++
e is 65537 (0x10001)
2014-01-08 22:54:10.445 1883 INFO keystone.common.openssl [-] openssl req -new -x509 -extensions v3_ca -key /etc/keystone/pki/private/cakey.pem -out /etc/keystone/pki/certs/cacert.pem -days 3650 -config /etc/keystone/pki/certs/openssl.conf -subj /C=US/ST=Unset/L=Unset/O=Unset/CN=www.meruvian.org
2014-01-08 22:54:10.607 1883 INFO keystone.common.openssl [-] openssl genrsa -out /etc/keystone/pki/private/signing_key.pem 2048
Generating RSA private key, 2048 bit long modulus
...................+++
..........................................................................................................................................................................................................................................................................................................+++
e is 65537 (0x10001)
2014-01-08 22:54:11.021 1883 INFO keystone.common.openssl [-] openssl req -key /etc/keystone/pki/private/signing_key.pem -new -out /etc/keystone/pki/certs/req.pem -config /etc/keystone/pki/certs/openssl.conf -subj /C=US/ST=Unset/L=Unset/O=Unset/CN=www.meruvian.org
2014-01-08 22:54:11.030 1883 INFO keystone.common.openssl [-] openssl ca -batch -out /etc/keystone/pki/certs/signing_cert.pem -config /etc/keystone/pki/certs/openssl.conf -days 3650d -cert /etc/keystone/pki/certs/cacert.pem -keyfile /etc/keystone/pki/private/cakey.pem -infiles /etc/keystone/pki/certs/req.pem
Using configuration from /etc/keystone/pki/certs/openssl.conf
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName           :PRINTABLE:'US'
stateOrProvinceName   :ASN.1 12:'Unset'
localityName          :ASN.1 12:'Unset'
organizationName      :ASN.1 12:'Unset'
commonName            :ASN.1 12:'www.meruvian.org'
Certificate is to be certified until Jan  6 15:54:11 2024 GMT (3650 days)

Write out database with 1 new entries
Data Base Updated