| *** gyee has quit IRC | 00:14 | |
| *** SheenaG has quit IRC | 00:18 | |
| *** zz_dimtruck is now known as dimtruck | 00:30 | |
| *** SheenaG has joined #openstack-barbican | 01:16 | |
| *** SheenaG has quit IRC | 01:24 | |
| *** kebray has quit IRC | 01:30 | |
| *** woodster_ has quit IRC | 01:40 | |
| *** SheenaG has joined #openstack-barbican | 02:40 | |
| *** kebray has joined #openstack-barbican | 02:56 | |
| *** SheenaG has quit IRC | 03:03 | |
| *** dimtruck is now known as zz_dimtruck | 03:31 | |
| *** dave-mccowan has quit IRC | 03:36 | |
| *** woodster_ has joined #openstack-barbican | 04:47 | |
| *** kebray has quit IRC | 04:50 | |
| *** kebray has joined #openstack-barbican | 04:51 | |
| *** kebray has quit IRC | 06:24 | |
| *** woodster_ has quit IRC | 06:50 | |
| *** nickrmc83 has joined #openstack-barbican | 07:04 | |
| *** tkelsey has joined #openstack-barbican | 07:12 | |
| *** darrenmoffat has quit IRC | 10:19 | |
| *** darrenmoffat has joined #openstack-barbican | 10:20 | |
| *** jamielennox is now known as jamielennox|away | 10:58 | |
| *** woodster_ has joined #openstack-barbican | 11:26 | |
| *** chlong has joined #openstack-barbican | 11:48 | |
| *** kebray has joined #openstack-barbican | 11:57 | |
| *** kebray has quit IRC | 12:22 | |
| *** alee has quit IRC | 12:28 | |
| *** zz_dimtruck is now known as dimtruck | 12:33 | |
| *** rellerreller has joined #openstack-barbican | 12:37 | |
| *** nickrmc83 has quit IRC | 12:41 | |
| *** dave-mccowan has joined #openstack-barbican | 12:42 | |
| *** nickrmc83 has joined #openstack-barbican | 12:51 | |
| *** xaeth_afk is now known as xaeth | 12:53 | |
| *** rellerreller has quit IRC | 13:00 | |
| *** rellerreller has joined #openstack-barbican | 13:03 | |
| *** alee has joined #openstack-barbican | 13:43 | |
| *** jorge_munoz has quit IRC | 14:02 | |
| *** pglass has joined #openstack-barbican | 14:05 | |
| *** nickrmc83 has quit IRC | 14:10 | |
| *** igueths has joined #openstack-barbican | 14:18 | |
| jvrbanac | reaperhulk, redrobot, rellerreller, woodster_, hockeynut, could I get a a workflow? https://review.openstack.org/#/c/182128/ | 14:21 |
|---|---|---|
| hockeynut | done | 14:21 |
| *** nickrmc83 has joined #openstack-barbican | 14:22 | |
| *** nickrmc83 has quit IRC | 14:27 | |
| *** shakamunyi has joined #openstack-barbican | 14:29 | |
| *** silos has joined #openstack-barbican | 14:34 | |
| *** mordred has quit IRC | 14:40 | |
| *** rellerreller has quit IRC | 14:40 | |
| *** nelsnelson has joined #openstack-barbican | 14:40 | |
| *** mordred has joined #openstack-barbican | 14:42 | |
| *** barra204 has joined #openstack-barbican | 14:43 | |
| *** SheenaG has joined #openstack-barbican | 14:52 | |
| *** alee has quit IRC | 15:01 | |
| *** alee has joined #openstack-barbican | 15:02 | |
| *** SheenaG has quit IRC | 15:06 | |
| alee | woodster_, were you able to open and see the slides? | 15:07 |
| alee | redrobot, jvrbanac - would be nice to get https://review.openstack.org/#/c/179397/ in for therve | 15:09 |
| alee | woodster_, ^^ | 15:09 |
| openstackgerrit | Merged openstack/barbican: Adding config option for specifying HSM slot https://review.openstack.org/182128 | 15:09 |
| alee | especially as we actually use the outputs from that patch in our summit talk | 15:09 |
| *** nickrmc83 has joined #openstack-barbican | 15:16 | |
| *** everjeje has joined #openstack-barbican | 15:17 | |
| *** reaperhulk has quit IRC | 15:20 | |
| *** reaperhulk has joined #openstack-barbican | 15:30 | |
| *** nickrmc83 has quit IRC | 15:33 | |
| woodster_ | alee: in meeting foo but will take a look after lunch | 15:48 |
| alee | woodster_, ok thanks -- I'm reading your cert specs now | 15:49 |
| *** gyee has joined #openstack-barbican | 15:51 | |
| *** SheenaG has joined #openstack-barbican | 16:05 | |
| woodster_ | alee, thanks. A thought I had (adding SheenaG Sheena_) is that we really should explain the functional diff between cancel and revoke cert. Cancel is done when the cert is generated but within a period of time after that determined by the CA (I recall). Revoke is done after that period of time, and probably after the cert is used/published, and probably | 16:16 |
| woodster_ | involve adding to revocation lists and so forth. | 16:16 |
| SheenaG | Cancel and revoke get weird, I think a lot of it is by CA as to how that terminology is applied | 16:17 |
| alee | woodster_, haven't gotten to that yet - but I'm pretty sure thats not how dogtag sees things | 16:18 |
| alee | Sheena_, were you able to open/see the slides? | 16:18 |
| alee | woodster_, I'm still stuck on your reissue blueprint | 16:18 |
| alee | woodster_, Sheena_ one of the things we need to do next week is get a very clear sense of what we mean for each of those terms | 16:20 |
| alee | ie. what barbican users would expect to get | 16:20 |
| alee | woodster_, Sheena_ because different CA's will behave differently based on their policies. | 16:21 |
| *** shakamunyi has quit IRC | 16:27 | |
| *** barra204 has quit IRC | 16:28 | |
| *** xaeth is now known as xaeth_afk | 16:34 | |
| alee | Sheena_, can you see the slides? | 16:39 |
| alee | redrobot, is there a schedule for what we plan to discuss in each of the design sessions? | 16:40 |
| SheenaG | woodster_, alee: I haven't looked at the slides yet, but I saw your e-mail | 16:43 |
| SheenaG | And I would imagine that we'd consider "cancel" to be an in flight order | 16:43 |
| SheenaG | And "revoke" to be a post-completion order | 16:43 |
| *** xaeth_afk is now known as xaeth | 16:43 | |
| SheenaG | Which is the most commonly expected terminology | 16:43 |
| alee | Sheena_, good - that makes sense to me | 16:43 |
| SheenaG | I don't think we want to get into the weeds on how different CAs expect different terminology based on whether or not they're going to refund you | 16:46 |
| SheenaG | It just gets weird at that level | 16:46 |
| *** xaeth is now known as xaeth_afk | 16:48 | |
| *** xaeth_afk is now known as xaeth | 16:56 | |
| *** xaeth is now known as xaeth_afk | 16:57 | |
| *** atiwari has joined #openstack-barbican | 16:58 | |
| *** alee is now known as alee_food | 17:08 | |
| *** gyee has quit IRC | 17:16 | |
| *** atiwari has quit IRC | 17:20 | |
| *** atiwari has joined #openstack-barbican | 17:22 | |
| openstackgerrit | Steve Heyman proposed openstack/python-barbicanclient: Re-merge CLI test update for auth URL and version https://review.openstack.org/183120 | 17:28 |
| *** rellerreller has joined #openstack-barbican | 17:33 | |
| *** atiwari has quit IRC | 17:38 | |
| *** xaeth_afk is now known as xaeth | 17:39 | |
| *** jsavak has joined #openstack-barbican | 17:50 | |
| *** atiwari has joined #openstack-barbican | 17:50 | |
| *** dimtruck is now known as zz_dimtruck | 18:15 | |
| *** zz_dimtruck is now known as dimtruck | 18:16 | |
| *** gyee has joined #openstack-barbican | 18:19 | |
| *** pglass has quit IRC | 18:31 | |
| *** rellerreller has quit IRC | 18:32 | |
| *** alee_food is now known as alee | 18:32 | |
| *** pglass has joined #openstack-barbican | 18:34 | |
| *** atiwari has quit IRC | 18:34 | |
| *** atiwari has joined #openstack-barbican | 18:34 | |
| *** atiwari has quit IRC | 18:43 | |
| *** dave-mccowan has quit IRC | 18:44 | |
| *** xaeth is now known as xaeth_afk | 18:44 | |
| *** pglass has quit IRC | 19:11 | |
| *** dave-mccowan has joined #openstack-barbican | 19:11 | |
| *** ccneill has joined #openstack-barbican | 19:11 | |
| *** pglass has joined #openstack-barbican | 19:11 | |
| ccneill | has anyone else had issues with pbr when running functional tests w/ tox? | 19:11 |
| ccneill | I keep getting this: ValueError: Unknown remainder ['g8b983b1'] in '2015.2.dev53.g8b983b1' | 19:12 |
| *** SheenaG has quit IRC | 19:18 | |
| *** atiwari has joined #openstack-barbican | 19:29 | |
| *** atiwari has quit IRC | 19:30 | |
| *** tkelsey has quit IRC | 19:41 | |
| *** openstackgerrit has quit IRC | 19:52 | |
| *** openstackgerrit has joined #openstack-barbican | 19:52 | |
| *** tkelsey has joined #openstack-barbican | 20:08 | |
| *** jhfeng has joined #openstack-barbican | 20:09 | |
| *** tkelsey has quit IRC | 20:13 | |
| *** SheenaG has joined #openstack-barbican | 20:14 | |
| *** silos has left #openstack-barbican | 20:15 | |
| alee | Sheena_, woodster_ had a chance to look at the slides yet? | 20:20 |
| alee | Sheena_, woodster_ I just want to confirm you guys can open them and it all looks ok. Otherwise I need to try and resave in ppt directly. | 20:20 |
| SheenaG | Looks like the edited version is opening fine for me | 20:23 |
| SheenaG | Also woodster_: my e-mail didn't have the section about agreeing to be filmed? Weird | 20:26 |
| SheenaG | I used the link you sent | 20:26 |
| SheenaG | Maybe I agreed earlier | 20:26 |
| woodster_ | SheenaG: alee ok, I'll update the cancel BP to be a more generic 'cancel PENDING order' sort of BP then? So for a cert order that means a plugin might get a cancel order sort of call. The client would make the cancel order request on the same order UUID then? | 20:31 |
| woodster_ | SheenaG: alee Whereas a revoke would be a new cert order request (so new UUID) but it refers to a created container ID that represents the certificate | 20:32 |
| woodster_ | SheenaG: yeah I think the emails for the release waiver are unique per speaker | 20:32 |
| woodster_ | alee: ok, I'm finally getting to the point of looking at those slides :\ | 20:32 |
| woodster_ | alee, to see the design sessions (and other barbican things too), use this query: http://libertydesignsummit.sched.org/?s=barbican | 20:34 |
| woodster_ | redrobot: ccneill is getting that pbr version error above. Does Charles just have to update his pbr version to fix that/ | 20:35 |
| woodster_ | ? | 20:35 |
| alee | woodster_, nice search link -- there is nothing there that indicates general topics of the "work sessions" | 20:37 |
| alee | woodster_, redrobot are those not further defined yet? | 20:38 |
| alee | redrobot, woodster_ if we're just going to go through the list - thats ok too. | 20:38 |
| alee | just wanted to be sure I was current | 20:38 |
| alee | looking for my email .. | 20:39 |
| alee | speaker email | 20:39 |
| alee | woodster_, Sheena_ yeah - mine says nothing about youtube either. I must have given my permission earlier. | 20:41 |
| woodster_ | alee: I think going thru the list was the objective | 20:41 |
| alee | woodster_, ok -- gotta make sure everything I wanted to talk about is on the list :/ | 20:42 |
| woodster_ | alee: SheenaG well my email said I only recieved the email because I hadn't signed the waiver yet, so maybe you all did? | 20:42 |
| SheenaG | woodster_: shame | 20:43 |
| SheenaG | ;-) | 20:43 |
| woodster_ | alee, yeah I was thinking of highlighting important items in a summary above that long list, but hadn't gotten to it | 20:43 |
| alee | woodster_, Sheena_ so if the cancel action is to cancel a pending order, then I dont understand why you need a special order. | 20:43 |
| woodster_ | SheenaG: are you surprised that I was behind on something? :) | 20:44 |
| alee | woodster_, we already have some skeleton code for cancelling orders .. | 20:44 |
| woodster_ | alee: yeah, we could probably just delete that PENDING order and have it cancel things under the hood? | 20:44 |
| alee | woodster_, which has yet to be implemented. but it seems that this would be an action on the specific order | 20:44 |
| alee | I would not delete the order -- rather POST /order/foo/cancel | 20:45 |
| alee | or something like that | 20:45 |
| woodster_ | alee: SheenaG yeah like a PUT /orders/{UUID}/cancel sort of thing perhaps | 20:45 |
| alee | exactly | 20:45 |
| alee | woodster_, Sheena_ I was thinking you meant some kind of thing whereby you could cancel a just completed order so you would not get charged for it | 20:46 |
| alee | or something similar | 20:46 |
| alee | woodster_, Sheena_ not somethign dogtag offers -- but maybe this is something symantec does ? | 20:47 |
| woodster_ | alee, SheenaG That was the original intent of that BP I'm pretty sure | 20:47 |
| alee | woodster_, you sure? you did write the BP? :) | 20:48 |
| alee | woodster_, I can't speak to whether this is something symantec needs -- if it is - then fine, if not then we simply need to impleement cancel as is | 20:49 |
| woodster_ | alee, SheenaG Yeah I think it was a symantec thing. I wrote those perhaps a bit hastily, back when I had hope we'd review those things *before* the summit...what a idealist 3-months-ago-woodster was! | 20:49 |
| SheenaG | woodster_ alee: there is logic on Symantec's side regarding how to "end" an order following its issuance that decides if the customer doesn't get charged | 20:49 |
| SheenaG | Hahaha | 20:49 |
| alee | woodster_, we're still before the summit :) | 20:49 |
| woodster_ | SheenaG: alee Yeah but that should really be handled by enterprise business logic that sees when the request was made to barbican to cancel, and when the order was initiated, and if time is < a refund max, then they get a refund credit | 20:50 |
| woodster_ | alee: oh yeah, plenty of time to spare! | 20:50 |
| woodster_ | alee: I still need to move those all over to the liberty folder :\ | 20:50 |
| alee | woodster_, Sheena_ we need a couple of more blueprints for certs that I need to write. Prob wont get them done before summit - but I'll put them on the list | 20:51 |
| alee | woodster_, Sheena_ one is exposing the ability to create subcas | 20:51 |
| alee | woodster_, Sheena_ the other is to figure out how to be able to get certmonger (or similar) to be able to renew a cert without the user having to add credentials | 20:52 |
| alee | woodster_, the second one should be fun but it might involve being able to permit renewals based on cert/private key possession | 20:54 |
| alee | ok - gotta head home .. talk to ya'll tommorow during run through | 20:54 |
| redrobot | alee sorry, just now catching up on IRC | 20:55 |
| redrobot | alee I did not want to timebox the working sessions. I figured we'll do something similar to the last mid-cycle where we just go down the list of the etherpad items. | 20:55 |
| alee | redrobot, you mean when we ended up talking half the time about certs in castellan? or the summit before, when we talked half the time about content types ? :) | 20:57 |
| alee | redrobot, thats fine -- we'll see how things go. | 20:57 |
| redrobot | alee lol... well, let me rephrase that.... I'm wasn't sure how to split up the etherpad points into the sessions we have. | 20:57 |
| woodster_ | alee: SheenaG So I'll send out updates to the ppt deck tonight then | 20:58 |
| alee | redrobot, ah , a more honest answer :) | 20:58 |
| redrobot | alee I didn't want to end up in a situation where we cover a topic in 20 minutes, but can't start on a new topic because it's scheduled for a later session. | 20:58 |
| alee | understood | 20:58 |
| alee | redrobot, no matter what -- I'm not letting you get back on a plane without fixing the dogtag gate. | 20:59 |
| redrobot | alee deal! :) | 21:00 |
| *** alee is now known as alee_headed_home | 21:00 | |
| *** alee_headed_home has quit IRC | 21:06 | |
| *** chlong has quit IRC | 21:08 | |
| *** jsavak has quit IRC | 21:10 | |
| *** rellerreller has joined #openstack-barbican | 21:11 | |
| *** openstackgerrit has quit IRC | 21:22 | |
| *** openstackgerrit has joined #openstack-barbican | 21:22 | |
| jvrbanac | woodster_, you | 21:25 |
| jvrbanac | ^yo | 21:25 |
| woodster_ | jvrbanac: hey John | 21:28 |
| jvrbanac | woodster_, hey, do you know why I'm getting a crap load of debug messages from sqlalchemy on trunk now? | 21:29 |
| woodster_ | SheenaG: I looks like the look and feel in alee's first presentation version is borked :\ | 21:29 |
| woodster_ | jvrbanac: in local dev mode, or in our envs? | 21:30 |
| *** rellerreller has quit IRC | 21:30 | |
| jvrbanac | woodster_, local dev | 21:30 |
| woodster_ | jvrbanac: hmmm...if just running the app locally, then the config debug setting must be set to true now? | 21:31 |
| jvrbanac | Nope | 21:31 |
| jvrbanac | woodster_, nope | 21:31 |
| jvrbanac | I'm only getting debug messages from sqlalchemy and info from everything else. | 21:31 |
| jvrbanac | woodster_, http://hastebin.com/xuzatipoqe.log | 21:32 |
| SheenaG | woodster_: you're seeing weird formatting on the edited version? | 21:34 |
| SheenaG | Mine looked okay | 21:34 |
| woodster_ | SheenaG: on the one that alee said he edited with openoffice | 21:35 |
| woodster_ | jvrbanac: yeah it appears to be ignoring config settings.... | 21:35 |
| woodster_ | jvrbanac: wtf!!!! | 21:37 |
| woodster_ | SheenaG: I can't just copy objects from a working ppt to that one...the colors are all borked :\ | 21:37 |
| SheenaG | So Ade's ppt looks okay but you can't copy objects in because they don't format correctly? | 21:40 |
| woodster_ | jvrbanac: I see the problem (a string opt instead of a boolean one for repositories.py's sql_pool_logging) :\ I'll put up a CR later this evening, sorry for that | 21:42 |
| jvrbanac | woodster_, np | 21:43 |
| jvrbanac | woodster_, btw, I'll try to put a CR tonight or tomorrow morning to address the unauthenticated context problem | 21:43 |
| woodster_ | jvrbanac: yeah, I looked at that one...either we disable policy look ups like had in there before, or require X-Roles to be provided maybe? That latter is not expected though, and would require changing docs, but would let folks play with role/RBAC behaviors locally | 21:45 |
| jvrbanac | woodster_, actually I was thinking about just saying that if you don't provide a X-Roles then default to admin | 21:46 |
| jvrbanac | woodster_, you're running without auth, so you're effectively admin anyhow | 21:46 |
| jvrbanac | woodster_, you still want a external middleware to specify the role, but if it's not specified then you're using an admin role | 21:48 |
| *** igueths has quit IRC | 21:49 | |
| jvrbanac | woodster_, thoughts? I know it sounds a bit crazy, but not really if you think about it | 21:51 |
| woodster_ | jvrbanac: I like that approach | 21:56 |
| woodster_ | jvrbanac: backwards compatible | 21:57 |
| redrobot | jvrbanac sounds reasonable to me | 21:59 |
| *** pglass has quit IRC | 22:06 | |
| *** nelsnelson has quit IRC | 22:20 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/182322 | 22:41 |
| *** shakamunyi has joined #openstack-barbican | 22:47 | |
| *** barra204 has joined #openstack-barbican | 22:47 | |
| *** ccneill has quit IRC | 23:01 | |
| *** dave-mccowan has quit IRC | 23:02 | |
| *** barra204 has quit IRC | 23:04 | |
| *** shakamunyi has quit IRC | 23:04 | |
| *** redrobot has quit IRC | 23:04 | |
| *** redrobot has joined #openstack-barbican | 23:05 | |
| *** xaeth_afk has quit IRC | 23:05 | |
| *** redrobot is now known as Guest19895 | 23:05 | |
| *** xaeth_afk has joined #openstack-barbican | 23:06 | |
| *** chlong has joined #openstack-barbican | 23:10 | |
| *** jhfeng has quit IRC | 23:11 | |
| *** dstufft has joined #openstack-barbican | 23:15 | |
| *** dave-mccowan has joined #openstack-barbican | 23:16 | |
| *** shakamunyi has joined #openstack-barbican | 23:18 | |
| *** barra204 has joined #openstack-barbican | 23:18 | |
| *** ccneill has joined #openstack-barbican | 23:31 | |
| *** dimtruck is now known as zz_dimtruck | 23:36 | |
| *** alee_headed_home has joined #openstack-barbican | 23:52 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!