| chellygel | https://github.com/cloudkeep/symantecssl | 00:00 |
|---|---|---|
| *** jsavak has joined #openstack-barbican | 00:00 | |
| *** zz_dimtruck is now known as dimtruck | 00:01 | |
| *** shakamunyi has joined #openstack-barbican | 00:04 | |
| *** kebray has quit IRC | 00:05 | |
| *** jsavak has quit IRC | 00:12 | |
| *** alee has quit IRC | 00:16 | |
| *** dave-mccowan has joined #openstack-barbican | 00:16 | |
| *** dave-mccowan has quit IRC | 00:22 | |
| *** nkinder has joined #openstack-barbican | 00:24 | |
| *** shakamunyi has quit IRC | 00:29 | |
| jaosorior | can anybody check this one out? https://review.openstack.org/#/c/184650/ should be an easy one | 00:29 |
| *** kebray has joined #openstack-barbican | 00:46 | |
| *** kebray has quit IRC | 00:53 | |
| *** chlong has quit IRC | 00:55 | |
| openstackgerrit | Merged openstack/castellan: Migrate to oslo_context https://review.openstack.org/184650 | 01:09 |
| *** woodster_ has quit IRC | 01:10 | |
| *** dave-mccowan has joined #openstack-barbican | 01:12 | |
| *** chlong has joined #openstack-barbican | 01:12 | |
| *** shakamunyi has joined #openstack-barbican | 01:16 | |
| *** dave-mccowan has quit IRC | 01:17 | |
| *** nkinder has quit IRC | 01:24 | |
| *** kebray has joined #openstack-barbican | 01:24 | |
| *** shakamunyi has quit IRC | 01:26 | |
| *** atiwari has joined #openstack-barbican | 01:40 | |
| *** atiwari has quit IRC | 01:41 | |
| *** codekobe has quit IRC | 01:47 | |
| *** codekobe has joined #openstack-barbican | 01:48 | |
| *** dimtruck is now known as zz_dimtruck | 01:57 | |
| *** zz_dimtruck is now known as dimtruck | 02:49 | |
| *** nelsnelson has joined #openstack-barbican | 02:57 | |
| *** chlong has quit IRC | 03:11 | |
| *** jaosorior has quit IRC | 03:12 | |
| *** kebray has quit IRC | 03:34 | |
| *** chlong has joined #openstack-barbican | 03:50 | |
| *** dimtruck is now known as zz_dimtruck | 03:54 | |
| *** nelsnelson has quit IRC | 04:00 | |
| openstackgerrit | Ian Cordasco proposed openstack/barbican: Remove unused incubated cryptoutils https://review.openstack.org/184711 | 04:15 |
| *** kebray has joined #openstack-barbican | 04:52 | |
| *** ganeshna has joined #openstack-barbican | 05:00 | |
| ganeshna | hi | 05:00 |
| ganeshna | quick question on the CLI part for certificates | 05:01 |
| ganeshna | 05:01 | |
| ganeshna | barbican --os-project-id 12345 --no-auth --endpoint http://localhost:9311 order create --type certificate | 05:01 |
| ganeshna | with this, I get Unknown Order type "certificate" error | 05:01 |
| ganeshna | barbican version - barbican 3.1.2 | 05:02 |
| ganeshna | please let me know what I am missing | 05:02 |
| *** dave-mccowan has joined #openstack-barbican | 05:12 | |
| *** dave-mccowan has quit IRC | 05:45 | |
| *** Nirupama has joined #openstack-barbican | 05:57 | |
| *** ganeshna has quit IRC | 06:13 | |
| *** gyee has joined #openstack-barbican | 06:21 | |
| *** jkf has quit IRC | 06:43 | |
| *** mordred has quit IRC | 06:43 | |
| *** morganfainberg has quit IRC | 06:43 | |
| *** mordred has joined #openstack-barbican | 06:43 | |
| *** morganfainberg has joined #openstack-barbican | 06:43 | |
| *** jkf_ has joined #openstack-barbican | 06:43 | |
| *** jkf_ is now known as jkf | 06:43 | |
| *** gyee has quit IRC | 06:45 | |
| *** epequeno has quit IRC | 06:45 | |
| *** everjeje has quit IRC | 06:47 | |
| *** nickrmc83 has joined #openstack-barbican | 07:02 | |
| *** woodster_ has joined #openstack-barbican | 07:06 | |
| *** rm_mobile has joined #openstack-barbican | 07:23 | |
| *** rm_mobile has joined #openstack-barbican | 07:23 | |
| *** chlong has quit IRC | 07:39 | |
| *** kebray has quit IRC | 07:39 | |
| *** kebray has joined #openstack-barbican | 07:45 | |
| *** kebray has quit IRC | 07:54 | |
| *** everjeje has joined #openstack-barbican | 07:56 | |
| *** chlong has joined #openstack-barbican | 08:44 | |
| *** rm_mobile has quit IRC | 09:04 | |
| *** woodster_ has quit IRC | 09:10 | |
| *** ganeshna has joined #openstack-barbican | 09:23 | |
| *** ganeshna has quit IRC | 09:29 | |
| *** briancurtin has quit IRC | 11:18 | |
| *** briancurtin has joined #openstack-barbican | 11:18 | |
| *** chlong has quit IRC | 11:50 | |
| *** chlong has joined #openstack-barbican | 12:04 | |
| *** zz_dimtruck is now known as dimtruck | 12:18 | |
| *** Nirupama has quit IRC | 12:42 | |
| *** darrenmoffat has quit IRC | 12:46 | |
| *** darrenmoffat has joined #openstack-barbican | 12:47 | |
| *** nelsnelson has joined #openstack-barbican | 13:14 | |
| *** nelsnelson has quit IRC | 13:42 | |
| *** dimtruck is now known as zz_dimtruck | 13:49 | |
| *** zz_dimtruck is now known as dimtruck | 14:05 | |
| *** darrenmoffat has quit IRC | 14:37 | |
| *** darrenmoffat has joined #openstack-barbican | 14:49 | |
| *** nelsnelson has joined #openstack-barbican | 15:11 | |
| *** woodster_ has joined #openstack-barbican | 15:24 | |
| woodster_ | reaperhulk still meet at 8:30? | 15:25 |
| reaperhulk | Yeah I'm on my way | 15:26 |
| woodster_ | Meet at Starbucks by convention center? I'm in line now :) | 15:27 |
| *** jsavak has joined #openstack-barbican | 15:29 | |
| *** alee has joined #openstack-barbican | 15:52 | |
| *** dave-mccowan has joined #openstack-barbican | 15:59 | |
| *** dave-mcc_ has joined #openstack-barbican | 16:00 | |
| *** nickrmc83 has quit IRC | 16:03 | |
| *** dave-mccowan has quit IRC | 16:04 | |
| *** david-lyle has joined #openstack-barbican | 16:07 | |
| openstackgerrit | Merged openstack/barbican: Remove unused incubated cryptoutils https://review.openstack.org/184711 | 16:21 |
| redrobot | http://lists.openstack.org/pipermail/openstack-dev/2015-May/064412.html | 16:24 |
| redrobot | http://lists.openstack.org/pipermail/openstack-dev/2015-May/064340.html | 16:25 |
| redrobot | https://review.openstack.org/#/c/178926/ | 16:31 |
| *** jsavak has quit IRC | 16:39 | |
| *** dave-mcc_ has quit IRC | 16:44 | |
| *** kfarr has joined #openstack-barbican | 16:47 | |
| *** kfarr has quit IRC | 16:53 | |
| *** david-lyle has quit IRC | 16:56 | |
| *** kfarr has joined #openstack-barbican | 16:56 | |
| *** jamielennox|away is now known as jamielennox | 16:57 | |
| *** david-lyle has joined #openstack-barbican | 16:57 | |
| *** dave-mccowan has joined #openstack-barbican | 17:04 | |
| *** dimtruck is now known as zz_dimtruck | 17:28 | |
| *** kfarr has quit IRC | 17:34 | |
| *** kebray has joined #openstack-barbican | 17:36 | |
| *** kebray has quit IRC | 17:40 | |
| *** kebray has joined #openstack-barbican | 17:40 | |
| *** david-lyle has quit IRC | 17:42 | |
| *** kebray has quit IRC | 17:43 | |
| *** kfarr has joined #openstack-barbican | 17:45 | |
| *** jamielennox is now known as jamielennox|away | 17:52 | |
| *** SheenaG has joined #openstack-barbican | 17:55 | |
| *** JayF has joined #openstack-barbican | 17:59 | |
| JayF | Someone I was speaking to last night (CORE party @ UBC) suggested a library to integrate with rather than barbican directly | 18:00 |
| JayF | that has HSM backends as well as barbican | 18:00 |
| JayF | c-something, but I can't recall the name :( | 18:00 |
| redrobot | JayF Castellan http://git.openstack.org/cgit/openstack/castellan/ | 18:00 |
| JayF | exactly; thanks | 18:01 |
| JayF | We're likely going to do that integration (for IPMI credentials) in Ironic for the L cycle | 18:01 |
| JayF | \o/ | 18:01 |
| *** david-lyle has joined #openstack-barbican | 18:05 | |
| *** SheenaG has quit IRC | 18:05 | |
| redrobot | JayF cool! | 18:05 |
| *** jaosorior has joined #openstack-barbican | 18:06 | |
| jaosorior | any workflows for this one? https://review.openstack.org/#/c/184362/ | 18:10 |
| jaosorior | or this one? https://review.openstack.org/#/c/184309/ | 18:10 |
| jaosorior | kfarr: ping | 18:14 |
| kfarr | jaosorior pong | 18:20 |
| jaosorior | kfarr: Are you gonna do any further changes to your barbican CR? | 18:20 |
| jaosorior | kfarr: was thinking of starting to code the keystone part | 18:21 |
| kfarr | To that particular CR, no. The only changes that need to be made are the keystone ones | 18:21 |
| kfarr | jaosorior ^^ | 18:22 |
| jaosorior | kfarr: alright, I'll start working on it then | 18:24 |
| kfarr | jaosorior thanks!! | 18:38 |
| *** zz_dimtruck is now known as dimtruck | 18:38 | |
| *** david-lyle has quit IRC | 18:42 | |
| jaosorior | kfarr: I see that in the CR some sections of a "barbican" group are fetched from the conf file. Is there an example conf file in the repo already? I'm not finding it | 18:45 |
| kfarr | jaosorior, no, I need to add that | 18:46 |
| jaosorior | can you do that? I'll just fetch your newer CR | 18:49 |
| jaosorior | kfarr: ^^ | 18:49 |
| rm_work | there is no reason barbican can't run on MySQL, right? | 18:52 |
| rm_work | someone is pointing at https://github.com/cloudkeep/barbican/wiki/Architecture and saying it says barbican is postgres only >_> | 18:52 |
| rm_work | about to reply "should be fine on mysql" but figured I'd check first | 18:52 |
| *** david-lyle has joined #openstack-barbican | 18:53 | |
| kfarr | jaosorior gah, that work is on a different computer, I'll try to recreate it | 18:53 |
| reaperhulk | rm_work yeah it's all sqlalchemy | 18:53 |
| reaperhulk | it runs on sqlite just fine so it will run on mysql | 18:54 |
| rm_work | yeah that is what i thought | 18:54 |
| rm_work | yeah | 18:54 |
| rm_work | my draft was: | 18:54 |
| rm_work | "Barbican is using SQLAlchemy, so I assume PostgreSQL is not a hard requirement. I know it deploys fine with SQLite for local development, and I am not aware of anything that would prevent it from running on MySQL." | 18:54 |
| jvrbanac | rm_work, I believe it uses MySQL in devstack | 18:54 |
| *** dave-mccowan has quit IRC | 18:57 | |
| rm_work | cool, thansk | 18:59 |
| rm_work | *thanks | 18:59 |
| jaosorior | kfarr: It's alright, I'll wait, still researching some stuff anyway | 18:59 |
| jvrbanac | rellerreller, jaosorior, alee, woodster_, we need one more vote for chellygel to join core. :D | 18:59 |
| *** david-lyle has quit IRC | 19:08 | |
| *** Kevin_Bishop has joined #openstack-barbican | 19:19 | |
| *** lee_calcote has joined #openstack-barbican | 19:20 | |
| lee_calcote | Is Barbican a KMIP compliant key manager or client or both? | 19:21 |
| rm_work | woo chellygel :) | 19:22 |
| redrobot | lee_calcote Barbican uses a pluggable backend architecture for storage. One of the plugin choices is a KMIP plugin that can do storage in a KMIP device. | 19:27 |
| redrobot | lee_calcote front end is a json RESTful API | 19:27 |
| *** Kevin_Bishop has quit IRC | 19:28 | |
| chellygel | rm_work, no woo yet, still need a vote | 19:28 |
| chellygel | plenty of time for vetos :P | 19:28 |
| chellygel | vetoes * | 19:28 |
| rm_work | yeah but who would veto chellygel | 19:28 |
| rm_work | have you met chellygel? :P | 19:28 |
| jvrbanac | :D | 19:28 |
| chellygel | i hear she makes good cookies. | 19:28 |
| *** kfarr has quit IRC | 19:29 | |
| lee_calcote | redrobot thanks. if i have a kmip client that wants to store keys in barbican as a central, replicated store, can I use barbican for this? | 19:29 |
| redrobot | lee_calcote I don't think that's possible now. Your client would be speaking KMIP, but barbican only listens in REST. You would need a KMIP -> Barbican REST API proxy to make it work. | 19:32 |
| openstackgerrit | Merged openstack/barbican: Split out generate mkek and hmac from get command https://review.openstack.org/184639 | 20:04 |
| rm_work | reaperhulk: does cryptography have an easy way to validate that a cert and PK are a valid pair? | 20:05 |
| *** jamielennox|away is now known as jamielennox | 20:15 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: ** DO NOT MERGE ** https://review.openstack.org/174880 | 20:16 |
| *** jamielennox is now known as jamielennox|away | 20:16 | |
| *** everjeje has quit IRC | 20:17 | |
| reaperhulk | rm_work: not right now | 20:19 |
| *** dave-mccowan has joined #openstack-barbican | 20:23 | |
| *** kebray has joined #openstack-barbican | 20:28 | |
| *** dave-mccowan has quit IRC | 20:32 | |
| *** david-lyle has joined #openstack-barbican | 20:35 | |
| *** dimtruck is now known as zz_dimtruck | 20:50 | |
| *** kebray has quit IRC | 20:53 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/castellan: Add Barbican key manager https://review.openstack.org/171918 | 20:57 |
| jaosorior | hockeynut: ping | 21:00 |
| hockeynut | jaosorior yessir | 21:00 |
| jaosorior | hockeynut: what was the reason again why the tempest config is being removed in this CR? https://review.openstack.org/#/c/180686/7 | 21:00 |
| hockeynut | to be consistent with the API tests | 21:01 |
| hockeynut | plus we can get ready if (when?) we move to tempest-lib or some other tempesty thing. this makes us more stand-alone for now | 21:01 |
| jaosorior | hockeynut: fair enough | 21:03 |
| *** alee has quit IRC | 21:03 | |
| *** lee_calc_ has joined #openstack-barbican | 21:10 | |
| *** lee_calc_ has quit IRC | 21:13 | |
| *** lee_calc_ has joined #openstack-barbican | 21:13 | |
| jaosorior | kfarr: can you point me to where the key manager library is being used? I think it would be a lot easier if we just pass a keystone session object instead of a context, and I wanna see if that's possible | 21:14 |
| *** lee_calcote has quit IRC | 21:15 | |
| openstackgerrit | Merged openstack/python-barbicanclient: Remove instances of _base_url https://review.openstack.org/184309 | 21:16 |
| *** david-lyle has quit IRC | 21:17 | |
| openstackgerrit | Merged openstack/python-barbicanclient: Add capability of specifying Barbican version to client https://review.openstack.org/184362 | 21:20 |
| *** david-lyle has joined #openstack-barbican | 21:23 | |
| *** alee has joined #openstack-barbican | 21:35 | |
| *** kebray has joined #openstack-barbican | 21:45 | |
| *** kebray has quit IRC | 21:46 | |
| *** kebray has joined #openstack-barbican | 21:46 | |
| *** kebray_ has joined #openstack-barbican | 21:48 | |
| *** kebray has quit IRC | 21:49 | |
| *** lee_calc_ has quit IRC | 21:50 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: ** DO NOT MERGE ** https://review.openstack.org/174880 | 21:52 |
| redrobot | https://review.openstack.org/184874 | 21:54 |
| *** jamielennox|away is now known as jamielennox | 21:58 | |
| redrobot | reaperhulk oh fun, there's an oslo session on concurrency up next | 22:00 |
| reaperhulk | oh, ha | 22:01 |
| reaperhulk | I bet glyph will be there | 22:01 |
| reaperhulk | what room? | 22:01 |
| redrobot | reaperhulk http://libertydesignsummit.sched.org/event/39fdc4293d241549e77c845385d293b4 | 22:03 |
| *** jamielennox is now known as jamielennox|away | 22:17 | |
| *** SheenaG has joined #openstack-barbican | 22:21 | |
| *** chlong has quit IRC | 22:23 | |
| *** atiwari has joined #openstack-barbican | 22:35 | |
| *** nelsnelson has quit IRC | 22:39 | |
| *** kebray_ has quit IRC | 22:43 | |
| *** david-lyle has quit IRC | 22:48 | |
| *** SheenaG has left #openstack-barbican | 22:50 | |
| *** atiwari has quit IRC | 22:52 | |
| *** atiwari has joined #openstack-barbican | 22:53 | |
| *** david-lyle has joined #openstack-barbican | 22:54 | |
| *** atiwari has quit IRC | 22:58 | |
| *** atiwari has joined #openstack-barbican | 23:04 | |
| *** david-lyle has quit IRC | 23:08 | |
| *** atiwari has quit IRC | 23:10 | |
| *** chlong has joined #openstack-barbican | 23:16 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: ** DO NOT MERGE ** https://review.openstack.org/174880 | 23:20 |
| *** kfarr has joined #openstack-barbican | 23:25 | |
| *** jamielennox|away is now known as jamielennox | 23:29 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Fix Dogtag setup script https://review.openstack.org/174880 | 23:40 |
| *** kebray has joined #openstack-barbican | 23:41 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Fix Dogtag setup script https://review.openstack.org/174880 | 23:42 |
| *** kfarr has quit IRC | 23:55 | |
| *** kebray has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!