| *** SheenaG has joined #openstack-barbican | 00:05 | |
| openstackgerrit | John Vrbanac proposed openstack/barbican: Adding config option for specifying HSM slot https://review.openstack.org/182128 | 00:49 |
|---|---|---|
| *** ChanServ changes topic to "OpenStack Barbican development" | 00:54 | |
| -openstackstatus- NOTICE: Gerrit has been downgraded to version 2.8 due to the issues observed today. Please report further problems in #openstack-infra. | 00:54 | |
| *** gyee has quit IRC | 01:12 | |
| openstackgerrit | Merged openstack/barbican: Port the Architecture, Dataflow, and Project Strucure docs https://review.openstack.org/132304 | 01:20 |
| *** zz_dimtruck is now known as dimtruck | 01:24 | |
| *** redrobot has quit IRC | 01:25 | |
| *** redrobot has joined #openstack-barbican | 01:26 | |
| *** redrobot is now known as Guest20306 | 01:26 | |
| *** dimtruck is now known as zz_dimtruck | 01:33 | |
| *** SheenaG has quit IRC | 01:43 | |
| *** SheenaG has joined #openstack-barbican | 02:02 | |
| *** SheenaG has quit IRC | 02:23 | |
| *** SheenaG has joined #openstack-barbican | 02:34 | |
| *** alee_dinner is now known as alee | 02:45 | |
| alee | Sheena_, you're trying to break my mbox | 02:45 |
| SheenaG | Was it really that big? Ohhhh maybe it's because I didn't strip animations out of the second one | 03:05 |
| SheenaG | I'm sorry | 03:05 |
| SheenaG | My brain honestly is melting from looking at slide decks | 03:05 |
| rm_you | augh i still haven't really had a chance to look at it <_< | 03:07 |
| rm_you | SheenaG: I will get to it... I promise... | 03:07 |
| rm_you | Hopefully, err, before the runthrough | 03:07 |
| SheenaG | rm_you: I'm working on making the Barbican Use Case one into something more interesting looking right now | 03:11 |
| rm_you | k | 03:11 |
| SheenaG | alee and woodster_ have seen what leaving me alone with a deck looks like, don't ask them or you'll get scared | 03:12 |
| SheenaG | :-) | 03:12 |
| SheenaG | rm_you: as long as you can do the run-through Wednesday, we can make corrections and/or updates right after and do another run-through maybe on Sunday when everyone gets in | 03:12 |
| SheenaG | rm_you: like a really lame pow-wow around some alcohol and a computer screen | 03:12 |
| rm_you | k | 03:13 |
| rm_you | sounds good to me | 03:13 |
| rm_you | well, other than I will be in WA and not BC | 03:13 |
| rm_you | driving up every day, don't have a hotel there | 03:13 |
| rm_you | so actually sunday night would be a stretch for me :P | 03:14 |
| SheenaG | You can VC in, but the alcohol is mandatory | 03:15 |
| SheenaG | ;-) | 03:15 |
| rm_you | can do | 03:16 |
| *** dabukalam has quit IRC | 03:17 | |
| *** dabukalam has joined #openstack-barbican | 03:18 | |
| *** dabukalam has quit IRC | 03:18 | |
| *** dabukalam has joined #openstack-barbican | 03:18 | |
| *** kebray has quit IRC | 03:37 | |
| *** alee_ has quit IRC | 03:46 | |
| *** kebray has joined #openstack-barbican | 03:52 | |
| *** dave-mccowan has quit IRC | 03:59 | |
| *** Nirupama has joined #openstack-barbican | 04:36 | |
| *** SheenaG has quit IRC | 04:38 | |
| *** arunkant has quit IRC | 05:48 | |
| *** rm_you has quit IRC | 06:00 | |
| *** arunkant has joined #openstack-barbican | 06:03 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Imported Translations from Transifex https://review.openstack.org/181714 | 06:07 |
| *** rm_you has joined #openstack-barbican | 06:09 | |
| *** kebray has quit IRC | 06:15 | |
| *** tkelsey has joined #openstack-barbican | 07:28 | |
| *** jaosorior has joined #openstack-barbican | 07:38 | |
| *** woodster_ has quit IRC | 07:40 | |
| *** openstackstatus has quit IRC | 07:52 | |
| *** openstack has joined #openstack-barbican | 07:53 | |
| -sendak.freenode.net- [freenode-info] if you're at a conference and other people are having trouble connecting, please mention it to staff: http://freenode.net/faq.shtml#gettinghelp | 07:53 | |
| *** openstackstatus has joined #openstack-barbican | 07:53 | |
| *** ChanServ sets mode: +v openstackstatus | 07:53 | |
| *** everjeje has joined #openstack-barbican | 08:10 | |
| *** nickrmc83 has joined #openstack-barbican | 08:17 | |
| *** darrenmoffat has quit IRC | 10:17 | |
| *** darrenmoffat has joined #openstack-barbican | 10:17 | |
| *** Nirupama has quit IRC | 11:16 | |
| *** woodster_ has joined #openstack-barbican | 11:29 | |
| *** alee has quit IRC | 12:13 | |
| *** dave-mccowan has joined #openstack-barbican | 12:26 | |
| *** zz_dimtruck is now known as dimtruck | 12:36 | |
| *** kfarr has joined #openstack-barbican | 13:00 | |
| *** rellerreller has joined #openstack-barbican | 13:10 | |
| *** alee has joined #openstack-barbican | 13:26 | |
| *** xek is now known as x3k | 13:52 | |
| *** nickrmc83 has quit IRC | 13:55 | |
| openstackgerrit | Merged openstack/castellan: Drop use of 'oslo' namespace package https://review.openstack.org/178245 | 13:56 |
| *** SheenaG has joined #openstack-barbican | 13:56 | |
| *** kebray has joined #openstack-barbican | 13:56 | |
| openstackgerrit | Merged openstack/castellan: Removing SymmetricKey docs from key module https://review.openstack.org/178843 | 13:57 |
| *** kfarr has quit IRC | 14:01 | |
| *** rellerreller has quit IRC | 14:02 | |
| openstackgerrit | Merged openstack/barbican: Imported Translations from Transifex https://review.openstack.org/181714 | 14:19 |
| *** dimtruck is now known as zz_dimtruck | 14:22 | |
| *** nelsnelson has joined #openstack-barbican | 14:24 | |
| *** zz_dimtruck is now known as dimtruck | 14:30 | |
| *** nickrmc83 has joined #openstack-barbican | 14:30 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/182322 | 14:36 |
| *** Guest20306 is now known as redrobot | 14:39 | |
| *** silos has joined #openstack-barbican | 14:43 | |
| *** pglass has joined #openstack-barbican | 14:45 | |
| hockeynut | anyone else having issues with pypy gate job? Fails with error: /home/jenkins/workspace/gate-python-barbicanclient-pypy/.tox/pypy/site-packages/pip-1.5.4.dist-info/METADATA: No such file or directory | 14:49 |
| hockeynut | I did a few recheck nobug but it still persists | 14:50 |
| *** igueths has joined #openstack-barbican | 14:50 | |
| reaperhulk | hockeynut: that's a discussion on the mailing list | 14:50 |
| hockeynut | thanks reaperhulk - will head over there (seems I'm not getting them in outlook mac client) | 14:51 |
| reaperhulk | they're considering removing the gate job, which I think is a real shame since that's not really the right fix, but whatever | 14:51 |
| hockeynut | "doc, it hurts when I do this..." | 14:52 |
| *** xaeth_afk is now known as xaeth | 14:54 | |
| *** kebray has quit IRC | 15:05 | |
| *** rellerreller has joined #openstack-barbican | 15:09 | |
| *** SheenaG has quit IRC | 15:10 | |
| *** SheenaG has joined #openstack-barbican | 15:19 | |
| *** shakamunyi has joined #openstack-barbican | 15:22 | |
| therve | hockeynut, I believe the pypy job has been made non-voting across the board yesterday | 15:22 |
| hockeynut | therve I saw that...but it still makes me sad to see red! At least I know its not just me | 15:22 |
| *** barra204 has joined #openstack-barbican | 15:22 | |
| kragniz | yeah, we've disabled it in glance also | 15:23 |
| therve | hockeynut, There is an easy workaround in tox.ini if you want to bother | 15:24 |
| hockeynut | therve I would be interested to see | 15:24 |
| therve | hockeynut, https://review.openstack.org/#/c/181851/ | 15:25 |
| hockeynut | should we follow suit? seems better than removing the job completely | 15:26 |
| therve | Well, the job is not removed and probably non voting already, but maybe | 15:27 |
| *** dimtruck is now known as zz_dimtruck | 15:28 | |
| *** zz_dimtruck is now known as dimtruck | 15:32 | |
| openstackgerrit | Steve Heyman proposed openstack/python-barbicanclient: Create behaviors for secrets https://review.openstack.org/179609 | 15:32 |
| *** ChanServ sets mode: +o redrobot | 15:35 | |
| *** redrobot sets mode: +v jraim | 15:35 | |
| *** redrobot sets mode: +v jaosorior | 15:35 | |
| *** gyee has joined #openstack-barbican | 15:41 | |
| openstackgerrit | Merged openstack/python-barbicanclient: Pass in keystone version and correct v2 URL to CLI https://review.openstack.org/182024 | 15:43 |
| *** kebray has joined #openstack-barbican | 16:02 | |
| *** nickrmc83 has quit IRC | 16:06 | |
| *** openstackgerrit_ has quit IRC | 16:11 | |
| openstackgerrit | Steve Heyman proposed openstack/python-barbicanclient: Add CLI smoke functional tests for containers https://review.openstack.org/179659 | 16:34 |
| silos | hey rellerreller, I have a question. Is it possible to hook up multiple KMIP plugins to a single barbican? My gut says no. | 16:45 |
| *** rellerreller has quit IRC | 16:45 | |
| alee | dave-mccowan, responded to your comment | 16:49 |
| *** silos has left #openstack-barbican | 16:49 | |
| dave-mccowan | alee, ok. can you add a couple lines to a unit test to show that the returned string concatenation can be parsed by one of the crypto libraries? i just remember the issues we had during the kilo.rc1 time frame when the generated PEM was not valid PEM. | 16:58 |
| alee | dave-mccowan, yeah - I plan to add to a functional test to confirm that we get valid results back for even a cert | 16:59 |
| alee | dave-mccowan, this was not caught because we never checked that we could get the cert itself back. | 17:00 |
| alee | we just checked that we got a cert container | 17:00 |
| alee | dave-mccowan, do we have test code to validate correct PEM-ness? | 17:01 |
| alee | dave-mccowan, I assume it would just be to do a load .. | 17:01 |
| dave-mccowan | alee, yes. i'll find an example. but, yea... just load without exception. | 17:01 |
| *** alpha_ori has quit IRC | 17:02 | |
| *** alpha_ori has joined #openstack-barbican | 17:07 | |
| dave-mccowan | alee here's a pem certificate validator: https://github.com/openstack/barbican/blob/master/functionaltests/api/v1/functional/test_rsa.py#L155 | 17:12 |
| alee | dave-mccowan, cool thanks | 17:15 |
| *** kfarr has joined #openstack-barbican | 17:21 | |
| dave-mccowan | alee wouldn't a typical certificate chain have 2 or 3 or more certificates concatenated? (e.g. server.crt, subordinate-ca.crt, root-ca.crt) is this what's in cert.pkcs7_cert_chain ? | 17:21 |
| alee | dave-mccowan, its pkcs7 - which is an asn1 structure (ftp://ftp.rsasecurity.com/pub/pkcs/ascii/pkcs-7.asc) that can be converted into a series of certs | 17:28 |
| alee | dave-mccowan, http://www.openssl.org/docs/apps/pkcs7.html | 17:29 |
| alee | dave-mccowan, see notes for relevant headers | 17:29 |
| openstackgerrit | Arun Kant proposed openstack/barbican: Removed per ACL operations and added support for PUT method. https://review.openstack.org/180888 | 17:29 |
| dave-mccowan | alee if it's a chain of two certs then i think the correct PEM format is <header> cert 1 <footer> <header> cert 2 <footer> | 17:31 |
| alee | dave-mccowan, no -- its pkcs7 | 17:31 |
| alee | dave-mccowan, which is its own format | 17:31 |
| *** chlong has quit IRC | 17:46 | |
| *** everjeje has quit IRC | 17:46 | |
| *** everjeje has joined #openstack-barbican | 17:50 | |
| openstackgerrit | Steve Heyman proposed openstack/python-barbicanclient: Create behaviors for secrets https://review.openstack.org/179609 | 17:53 |
| dave-mccowan | alee if barbican-core is expecting a "standard PEM", do we need a PKCS7 to PEM converter? | 17:54 |
| alee | dave-mccowan, well actually, we have never explictly defined what barbican-core expects for intermediates as far as I know. | 17:56 |
| alee | dave-mccowan, the usual standard for this kind of thing is pkcs7. | 17:56 |
| alee | dave-mccowan, given that dogtag is the first to actually provide this - I'd like to push for that :) | 17:57 |
| alee | but we should take an action item to explicitly decide this at the summit | 17:57 |
| alee | woodster_, redrobot ^^ | 17:57 |
| *** alee is now known as alee_food | 17:59 | |
| dave-mccowan | alee i just read the snake oil CA code, and it looks like it is not pkcs7. i agree, we should explicitly decide, document, and make consistent. | 17:59 |
| *** chlong has joined #openstack-barbican | 17:59 | |
| openstackgerrit | Steve Heyman proposed openstack/python-barbicanclient: Add CLI smoke functional tests for containers https://review.openstack.org/179659 | 18:01 |
| *** silos has joined #openstack-barbican | 18:07 | |
| openstackgerrit | Steve Heyman proposed openstack/python-barbicanclient: Remove tempest config dependency in functional tests https://review.openstack.org/180686 | 18:10 |
| *** igueths has quit IRC | 18:20 | |
| *** tkelsey has quit IRC | 18:22 | |
| *** alee_food is now known as alee | 18:29 | |
| *** silos has left #openstack-barbican | 18:58 | |
| *** pglass has quit IRC | 19:00 | |
| *** pglass has joined #openstack-barbican | 19:07 | |
| *** dimtruck is now known as zz_dimtruck | 19:15 | |
| *** openstackgerrit_ has joined #openstack-barbican | 19:16 | |
| *** zz_dimtruck is now known as dimtruck | 19:20 | |
| *** openstackgerrit_ has quit IRC | 19:25 | |
| *** jaosorior has quit IRC | 19:32 | |
| *** SheenaG has quit IRC | 19:33 | |
| *** shakamunyi has quit IRC | 19:35 | |
| *** barra204 has quit IRC | 19:36 | |
| openstackgerrit | Kaitlin Farr proposed openstack/castellan: Add Barbican key manager https://review.openstack.org/171918 | 19:41 |
| *** SheenaG has joined #openstack-barbican | 19:44 | |
| *** kfarr has quit IRC | 19:46 | |
| *** shakamunyi has joined #openstack-barbican | 19:50 | |
| *** barra204 has joined #openstack-barbican | 19:50 | |
| *** gyee has quit IRC | 19:52 | |
| *** silos has joined #openstack-barbican | 20:01 | |
| *** kebray has quit IRC | 20:20 | |
| openstackgerrit | Ade Lee proposed openstack/barbican: Base64 encode the cert returned from the Dogtag plugin https://review.openstack.org/181786 | 20:24 |
| alee | dave-mccowan, woodster_ redrobot - new patch posted | 20:26 |
| alee | ^^ | 20:26 |
| *** openstackgerrit has quit IRC | 20:37 | |
| *** openstackgerrit has joined #openstack-barbican | 20:37 | |
| *** dimtruck is now known as zz_dimtruck | 20:43 | |
| *** zz_dimtruck is now known as dimtruck | 20:57 | |
| *** kebray has joined #openstack-barbican | 21:01 | |
| *** gyee has joined #openstack-barbican | 21:01 | |
| *** gyee has quit IRC | 21:13 | |
| *** gyee has joined #openstack-barbican | 21:15 | |
| *** alee has quit IRC | 21:16 | |
| *** chlong has quit IRC | 21:24 | |
| *** jhfeng has joined #openstack-barbican | 21:30 | |
| jhfeng | ? | 21:30 |
| openstackgerrit | Nathan Reller proposed openstack/barbican: Added pkcs1_only Configuration to KMIP https://review.openstack.org/182461 | 21:32 |
| *** pglass has quit IRC | 21:35 | |
| *** nelsnelson has quit IRC | 21:44 | |
| *** silos has left #openstack-barbican | 21:59 | |
| *** jhfeng has quit IRC | 21:59 | |
| *** jhfeng has joined #openstack-barbican | 22:02 | |
| *** kebray has quit IRC | 22:04 | |
| *** dimtruck has quit IRC | 22:09 | |
| *** jhfeng has quit IRC | 22:10 | |
| *** dimtruck_ has joined #openstack-barbican | 22:10 | |
| *** dimtruck_ is now known as dimtruck | 22:11 | |
| *** xaeth is now known as xaeth_afk | 22:15 | |
| *** alee has joined #openstack-barbican | 22:23 | |
| *** kebray has joined #openstack-barbican | 23:09 | |
| *** chlong has joined #openstack-barbican | 23:15 | |
| *** dimtruck is now known as zz_dimtruck | 23:26 | |
| *** alee has quit IRC | 23:32 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!