Tuesday, 2015-05-12

*** SheenaG has joined #openstack-barbican00:05
openstackgerritJohn Vrbanac proposed openstack/barbican: Adding config option for specifying HSM slot  https://review.openstack.org/18212800:49
*** ChanServ changes topic to "OpenStack Barbican development"00:54
-openstackstatus- NOTICE: Gerrit has been downgraded to version 2.8 due to the issues observed today. Please report further problems in #openstack-infra.00:54
*** gyee has quit IRC01:12
openstackgerritMerged openstack/barbican: Port the Architecture, Dataflow, and Project Strucure docs  https://review.openstack.org/13230401:20
*** zz_dimtruck is now known as dimtruck01:24
*** redrobot has quit IRC01:25
*** redrobot has joined #openstack-barbican01:26
*** redrobot is now known as Guest2030601:26
*** dimtruck is now known as zz_dimtruck01:33
*** SheenaG has quit IRC01:43
*** SheenaG has joined #openstack-barbican02:02
*** SheenaG has quit IRC02:23
*** SheenaG has joined #openstack-barbican02:34
*** alee_dinner is now known as alee02:45
aleeSheena_, you're trying to break my mbox02:45
SheenaGWas it really that big?  Ohhhh maybe it's because I didn't strip animations out of the second one03:05
SheenaGI'm sorry03:05
SheenaGMy brain honestly is melting from looking at slide decks03:05
rm_youaugh i still haven't really had a chance to look at it <_<03:07
rm_youSheenaG: I will get to it... I promise...03:07
rm_youHopefully, err, before the runthrough03:07
SheenaGrm_you: I'm working on making the Barbican Use Case one into something more interesting looking right now03:11
rm_youk03:11
SheenaGalee and woodster_ have seen what leaving me alone with a deck looks like, don't ask them or you'll get scared03:12
SheenaG:-)03:12
SheenaGrm_you: as long as you can do the run-through Wednesday, we can make corrections and/or updates right after and do another run-through maybe on Sunday when everyone gets in03:12
SheenaGrm_you: like a really lame pow-wow around some alcohol and a computer screen03:12
rm_youk03:13
rm_yousounds good to me03:13
rm_youwell, other than I will be in WA and not BC03:13
rm_youdriving up every day, don't have a hotel there03:13
rm_youso actually sunday night would be a stretch for me :P03:14
SheenaGYou can VC in, but the alcohol is mandatory03:15
SheenaG;-)03:15
rm_youcan do03:16
*** dabukalam has quit IRC03:17
*** dabukalam has joined #openstack-barbican03:18
*** dabukalam has quit IRC03:18
*** dabukalam has joined #openstack-barbican03:18
*** kebray has quit IRC03:37
*** alee_ has quit IRC03:46
*** kebray has joined #openstack-barbican03:52
*** dave-mccowan has quit IRC03:59
*** Nirupama has joined #openstack-barbican04:36
*** SheenaG has quit IRC04:38
*** arunkant has quit IRC05:48
*** rm_you has quit IRC06:00
*** arunkant has joined #openstack-barbican06:03
openstackgerritOpenStack Proposal Bot proposed openstack/barbican: Imported Translations from Transifex  https://review.openstack.org/18171406:07
*** rm_you has joined #openstack-barbican06:09
*** kebray has quit IRC06:15
*** tkelsey has joined #openstack-barbican07:28
*** jaosorior has joined #openstack-barbican07:38
*** woodster_ has quit IRC07:40
*** openstackstatus has quit IRC07:52
*** openstack has joined #openstack-barbican07:53
-sendak.freenode.net- [freenode-info] if you're at a conference and other people are having trouble connecting, please mention it to staff: http://freenode.net/faq.shtml#gettinghelp07:53
*** openstackstatus has joined #openstack-barbican07:53
*** ChanServ sets mode: +v openstackstatus07:53
*** everjeje has joined #openstack-barbican08:10
*** nickrmc83 has joined #openstack-barbican08:17
*** darrenmoffat has quit IRC10:17
*** darrenmoffat has joined #openstack-barbican10:17
*** Nirupama has quit IRC11:16
*** woodster_ has joined #openstack-barbican11:29
*** alee has quit IRC12:13
*** dave-mccowan has joined #openstack-barbican12:26
*** zz_dimtruck is now known as dimtruck12:36
*** kfarr has joined #openstack-barbican13:00
*** rellerreller has joined #openstack-barbican13:10
*** alee has joined #openstack-barbican13:26
*** xek is now known as x3k13:52
*** nickrmc83 has quit IRC13:55
openstackgerritMerged openstack/castellan: Drop use of 'oslo' namespace package  https://review.openstack.org/17824513:56
*** SheenaG has joined #openstack-barbican13:56
*** kebray has joined #openstack-barbican13:56
openstackgerritMerged openstack/castellan: Removing SymmetricKey docs from key module  https://review.openstack.org/17884313:57
*** kfarr has quit IRC14:01
*** rellerreller has quit IRC14:02
openstackgerritMerged openstack/barbican: Imported Translations from Transifex  https://review.openstack.org/18171414:19
*** dimtruck is now known as zz_dimtruck14:22
*** nelsnelson has joined #openstack-barbican14:24
*** zz_dimtruck is now known as dimtruck14:30
*** nickrmc83 has joined #openstack-barbican14:30
openstackgerritOpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements  https://review.openstack.org/18232214:36
*** Guest20306 is now known as redrobot14:39
*** silos has joined #openstack-barbican14:43
*** pglass has joined #openstack-barbican14:45
hockeynutanyone else having issues with pypy gate job?  Fails with error: /home/jenkins/workspace/gate-python-barbicanclient-pypy/.tox/pypy/site-packages/pip-1.5.4.dist-info/METADATA: No such file or directory14:49
hockeynutI did a few recheck nobug but it still persists14:50
*** igueths has joined #openstack-barbican14:50
reaperhulkhockeynut: that's a discussion on the mailing list14:50
hockeynutthanks reaperhulk - will head over there (seems I'm not getting them in outlook mac client)14:51
reaperhulkthey're considering removing the gate job, which I think is a real shame since that's not really the right fix, but whatever14:51
hockeynut"doc, it hurts when I do this..."14:52
*** xaeth_afk is now known as xaeth14:54
*** kebray has quit IRC15:05
*** rellerreller has joined #openstack-barbican15:09
*** SheenaG has quit IRC15:10
*** SheenaG has joined #openstack-barbican15:19
*** shakamunyi has joined #openstack-barbican15:22
thervehockeynut, I believe the pypy job has been made non-voting across the board yesterday15:22
hockeynuttherve I saw that...but it still makes me sad to see red!  At least I know its not just me15:22
*** barra204 has joined #openstack-barbican15:22
kragnizyeah, we've disabled it in glance also15:23
thervehockeynut, There is an easy workaround in tox.ini if you want to bother15:24
hockeynuttherve I would be interested to see15:24
thervehockeynut, https://review.openstack.org/#/c/181851/15:25
hockeynutshould we follow suit?  seems better than removing the job completely15:26
therveWell, the job is not removed and probably non voting already, but maybe15:27
*** dimtruck is now known as zz_dimtruck15:28
*** zz_dimtruck is now known as dimtruck15:32
openstackgerritSteve Heyman proposed openstack/python-barbicanclient: Create behaviors for secrets  https://review.openstack.org/17960915:32
*** ChanServ sets mode: +o redrobot15:35
*** redrobot sets mode: +v jraim15:35
*** redrobot sets mode: +v jaosorior15:35
*** gyee has joined #openstack-barbican15:41
openstackgerritMerged openstack/python-barbicanclient: Pass in keystone version and correct v2 URL to CLI  https://review.openstack.org/18202415:43
*** kebray has joined #openstack-barbican16:02
*** nickrmc83 has quit IRC16:06
*** openstackgerrit_ has quit IRC16:11
openstackgerritSteve Heyman proposed openstack/python-barbicanclient: Add CLI smoke functional tests for containers  https://review.openstack.org/17965916:34
siloshey rellerreller, I have a question. Is it possible to hook up multiple KMIP plugins to a single barbican? My gut says no.16:45
*** rellerreller has quit IRC16:45
aleedave-mccowan, responded to your comment16:49
*** silos has left #openstack-barbican16:49
dave-mccowanalee, ok. can you add a couple lines to a unit test to show that the returned string concatenation can be parsed by one of the crypto libraries?  i just remember the issues we had during the kilo.rc1 time frame when the generated PEM was not valid PEM.16:58
aleedave-mccowan, yeah - I plan to add to a functional test to confirm that we get valid results back for even a cert16:59
aleedave-mccowan, this was not caught because we never checked that we could get the cert itself back.17:00
aleewe just checked that we got a cert container17:00
aleedave-mccowan, do we have test code to validate correct PEM-ness?17:01
aleedave-mccowan, I assume it would just be to do a load ..17:01
dave-mccowanalee, yes.  i'll find an example.  but, yea... just load without exception.17:01
*** alpha_ori has quit IRC17:02
*** alpha_ori has joined #openstack-barbican17:07
dave-mccowanalee here's a pem certificate validator: https://github.com/openstack/barbican/blob/master/functionaltests/api/v1/functional/test_rsa.py#L15517:12
aleedave-mccowan, cool thanks17:15
*** kfarr has joined #openstack-barbican17:21
dave-mccowanalee wouldn't a typical certificate chain have 2 or 3 or more certificates concatenated?  (e.g. server.crt, subordinate-ca.crt, root-ca.crt)   is this what's in cert.pkcs7_cert_chain ?17:21
aleedave-mccowan, its pkcs7 - which is an asn1 structure (ftp://ftp.rsasecurity.com/pub/pkcs/ascii/pkcs-7.asc) that can be converted into a series of certs17:28
aleedave-mccowan, http://www.openssl.org/docs/apps/pkcs7.html17:29
aleedave-mccowan, see notes for relevant headers17:29
openstackgerritArun Kant proposed openstack/barbican: Removed per ACL operations and added support for PUT method.  https://review.openstack.org/18088817:29
dave-mccowanalee if it's a chain of two certs then i think the correct PEM format is <header> cert 1 <footer> <header> cert 2 <footer>17:31
aleedave-mccowan, no -- its pkcs717:31
aleedave-mccowan, which is its own format17:31
*** chlong has quit IRC17:46
*** everjeje has quit IRC17:46
*** everjeje has joined #openstack-barbican17:50
openstackgerritSteve Heyman proposed openstack/python-barbicanclient: Create behaviors for secrets  https://review.openstack.org/17960917:53
dave-mccowanalee if barbican-core is expecting a "standard PEM", do we need a PKCS7 to PEM converter?17:54
aleedave-mccowan, well actually, we have never explictly defined what barbican-core expects for intermediates as far as I know.17:56
aleedave-mccowan,  the usual standard for this kind of thing is pkcs7.17:56
aleedave-mccowan,  given that dogtag is the first to actually provide this - I'd like to push for that :)17:57
aleebut we should take an action item to explicitly decide this at the summit17:57
aleewoodster_, redrobot ^^17:57
*** alee is now known as alee_food17:59
dave-mccowanalee i just read the snake oil CA code, and it looks like it is not pkcs7.   i agree, we should explicitly decide, document, and make consistent.17:59
*** chlong has joined #openstack-barbican17:59
openstackgerritSteve Heyman proposed openstack/python-barbicanclient: Add CLI smoke functional tests for containers  https://review.openstack.org/17965918:01
*** silos has joined #openstack-barbican18:07
openstackgerritSteve Heyman proposed openstack/python-barbicanclient: Remove tempest config dependency in functional tests  https://review.openstack.org/18068618:10
*** igueths has quit IRC18:20
*** tkelsey has quit IRC18:22
*** alee_food is now known as alee18:29
*** silos has left #openstack-barbican18:58
*** pglass has quit IRC19:00
*** pglass has joined #openstack-barbican19:07
*** dimtruck is now known as zz_dimtruck19:15
*** openstackgerrit_ has joined #openstack-barbican19:16
*** zz_dimtruck is now known as dimtruck19:20
*** openstackgerrit_ has quit IRC19:25
*** jaosorior has quit IRC19:32
*** SheenaG has quit IRC19:33
*** shakamunyi has quit IRC19:35
*** barra204 has quit IRC19:36
openstackgerritKaitlin Farr proposed openstack/castellan: Add Barbican key manager  https://review.openstack.org/17191819:41
*** SheenaG has joined #openstack-barbican19:44
*** kfarr has quit IRC19:46
*** shakamunyi has joined #openstack-barbican19:50
*** barra204 has joined #openstack-barbican19:50
*** gyee has quit IRC19:52
*** silos has joined #openstack-barbican20:01
*** kebray has quit IRC20:20
openstackgerritAde Lee proposed openstack/barbican: Base64 encode the cert returned from the Dogtag plugin  https://review.openstack.org/18178620:24
aleedave-mccowan, woodster_ redrobot - new patch posted20:26
alee^^20:26
*** openstackgerrit has quit IRC20:37
*** openstackgerrit has joined #openstack-barbican20:37
*** dimtruck is now known as zz_dimtruck20:43
*** zz_dimtruck is now known as dimtruck20:57
*** kebray has joined #openstack-barbican21:01
*** gyee has joined #openstack-barbican21:01
*** gyee has quit IRC21:13
*** gyee has joined #openstack-barbican21:15
*** alee has quit IRC21:16
*** chlong has quit IRC21:24
*** jhfeng has joined #openstack-barbican21:30
jhfeng?21:30
openstackgerritNathan Reller proposed openstack/barbican: Added pkcs1_only Configuration to KMIP  https://review.openstack.org/18246121:32
*** pglass has quit IRC21:35
*** nelsnelson has quit IRC21:44
*** silos has left #openstack-barbican21:59
*** jhfeng has quit IRC21:59
*** jhfeng has joined #openstack-barbican22:02
*** kebray has quit IRC22:04
*** dimtruck has quit IRC22:09
*** jhfeng has quit IRC22:10
*** dimtruck_ has joined #openstack-barbican22:10
*** dimtruck_ is now known as dimtruck22:11
*** xaeth is now known as xaeth_afk22:15
*** alee has joined #openstack-barbican22:23
*** kebray has joined #openstack-barbican23:09
*** chlong has joined #openstack-barbican23:15
*** dimtruck is now known as zz_dimtruck23:26
*** alee has quit IRC23:32

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!