Thursday, 2015-05-21

chellygelhttps://github.com/cloudkeep/symantecssl00:00
*** jsavak has joined #openstack-barbican00:00
*** zz_dimtruck is now known as dimtruck00:01
*** shakamunyi has joined #openstack-barbican00:04
*** kebray has quit IRC00:05
*** jsavak has quit IRC00:12
*** alee has quit IRC00:16
*** dave-mccowan has joined #openstack-barbican00:16
*** dave-mccowan has quit IRC00:22
*** nkinder has joined #openstack-barbican00:24
*** shakamunyi has quit IRC00:29
jaosoriorcan anybody check this one out? https://review.openstack.org/#/c/184650/ should be an easy one00:29
*** kebray has joined #openstack-barbican00:46
*** kebray has quit IRC00:53
*** chlong has quit IRC00:55
openstackgerritMerged openstack/castellan: Migrate to oslo_context  https://review.openstack.org/18465001:09
*** woodster_ has quit IRC01:10
*** dave-mccowan has joined #openstack-barbican01:12
*** chlong has joined #openstack-barbican01:12
*** shakamunyi has joined #openstack-barbican01:16
*** dave-mccowan has quit IRC01:17
*** nkinder has quit IRC01:24
*** kebray has joined #openstack-barbican01:24
*** shakamunyi has quit IRC01:26
*** atiwari has joined #openstack-barbican01:40
*** atiwari has quit IRC01:41
*** codekobe has quit IRC01:47
*** codekobe has joined #openstack-barbican01:48
*** dimtruck is now known as zz_dimtruck01:57
*** zz_dimtruck is now known as dimtruck02:49
*** nelsnelson has joined #openstack-barbican02:57
*** chlong has quit IRC03:11
*** jaosorior has quit IRC03:12
*** kebray has quit IRC03:34
*** chlong has joined #openstack-barbican03:50
*** dimtruck is now known as zz_dimtruck03:54
*** nelsnelson has quit IRC04:00
openstackgerritIan Cordasco proposed openstack/barbican: Remove unused incubated cryptoutils  https://review.openstack.org/18471104:15
*** kebray has joined #openstack-barbican04:52
*** ganeshna has joined #openstack-barbican05:00
ganeshnahi05:00
ganeshnaquick question on the CLI part for certificates05:01
ganeshna05:01
ganeshna barbican --os-project-id 12345 --no-auth --endpoint http://localhost:9311 order create --type certificate05:01
ganeshnawith this, I get Unknown Order type "certificate" error05:01
ganeshnabarbican version - barbican 3.1.205:02
ganeshnaplease let me know what I am missing05:02
*** dave-mccowan has joined #openstack-barbican05:12
*** dave-mccowan has quit IRC05:45
*** Nirupama has joined #openstack-barbican05:57
*** ganeshna has quit IRC06:13
*** gyee has joined #openstack-barbican06:21
*** jkf has quit IRC06:43
*** mordred has quit IRC06:43
*** morganfainberg has quit IRC06:43
*** mordred has joined #openstack-barbican06:43
*** morganfainberg has joined #openstack-barbican06:43
*** jkf_ has joined #openstack-barbican06:43
*** jkf_ is now known as jkf06:43
*** gyee has quit IRC06:45
*** epequeno has quit IRC06:45
*** everjeje has quit IRC06:47
*** nickrmc83 has joined #openstack-barbican07:02
*** woodster_ has joined #openstack-barbican07:06
*** rm_mobile has joined #openstack-barbican07:23
*** rm_mobile has joined #openstack-barbican07:23
*** chlong has quit IRC07:39
*** kebray has quit IRC07:39
*** kebray has joined #openstack-barbican07:45
*** kebray has quit IRC07:54
*** everjeje has joined #openstack-barbican07:56
*** chlong has joined #openstack-barbican08:44
*** rm_mobile has quit IRC09:04
*** woodster_ has quit IRC09:10
*** ganeshna has joined #openstack-barbican09:23
*** ganeshna has quit IRC09:29
*** briancurtin has quit IRC11:18
*** briancurtin has joined #openstack-barbican11:18
*** chlong has quit IRC11:50
*** chlong has joined #openstack-barbican12:04
*** zz_dimtruck is now known as dimtruck12:18
*** Nirupama has quit IRC12:42
*** darrenmoffat has quit IRC12:46
*** darrenmoffat has joined #openstack-barbican12:47
*** nelsnelson has joined #openstack-barbican13:14
*** nelsnelson has quit IRC13:42
*** dimtruck is now known as zz_dimtruck13:49
*** zz_dimtruck is now known as dimtruck14:05
*** darrenmoffat has quit IRC14:37
*** darrenmoffat has joined #openstack-barbican14:49
*** nelsnelson has joined #openstack-barbican15:11
*** woodster_ has joined #openstack-barbican15:24
woodster_ reaperhulk still meet at 8:30?15:25
reaperhulkYeah I'm on my way15:26
woodster_Meet at Starbucks by convention center? I'm in line now :)15:27
*** jsavak has joined #openstack-barbican15:29
*** alee has joined #openstack-barbican15:52
*** dave-mccowan has joined #openstack-barbican15:59
*** dave-mcc_ has joined #openstack-barbican16:00
*** nickrmc83 has quit IRC16:03
*** dave-mccowan has quit IRC16:04
*** david-lyle has joined #openstack-barbican16:07
openstackgerritMerged openstack/barbican: Remove unused incubated cryptoutils  https://review.openstack.org/18471116:21
redrobothttp://lists.openstack.org/pipermail/openstack-dev/2015-May/064412.html16:24
redrobothttp://lists.openstack.org/pipermail/openstack-dev/2015-May/064340.html16:25
redrobothttps://review.openstack.org/#/c/178926/16:31
*** jsavak has quit IRC16:39
*** dave-mcc_ has quit IRC16:44
*** kfarr has joined #openstack-barbican16:47
*** kfarr has quit IRC16:53
*** david-lyle has quit IRC16:56
*** kfarr has joined #openstack-barbican16:56
*** jamielennox|away is now known as jamielennox16:57
*** david-lyle has joined #openstack-barbican16:57
*** dave-mccowan has joined #openstack-barbican17:04
*** dimtruck is now known as zz_dimtruck17:28
*** kfarr has quit IRC17:34
*** kebray has joined #openstack-barbican17:36
*** kebray has quit IRC17:40
*** kebray has joined #openstack-barbican17:40
*** david-lyle has quit IRC17:42
*** kebray has quit IRC17:43
*** kfarr has joined #openstack-barbican17:45
*** jamielennox is now known as jamielennox|away17:52
*** SheenaG has joined #openstack-barbican17:55
*** JayF has joined #openstack-barbican17:59
JayFSomeone I was speaking to last night (CORE party @ UBC) suggested a library to integrate with rather than barbican directly18:00
JayFthat has HSM backends as well as barbican18:00
JayFc-something, but I can't recall the name :(18:00
redrobotJayF Castellan http://git.openstack.org/cgit/openstack/castellan/18:00
JayFexactly; thanks18:01
JayFWe're likely going to do that integration (for IPMI credentials) in Ironic for the L cycle18:01
JayF\o/18:01
*** david-lyle has joined #openstack-barbican18:05
*** SheenaG has quit IRC18:05
redrobotJayF cool!18:05
*** jaosorior has joined #openstack-barbican18:06
jaosoriorany workflows for this one? https://review.openstack.org/#/c/184362/18:10
jaosorioror this one? https://review.openstack.org/#/c/184309/18:10
jaosoriorkfarr: ping18:14
kfarrjaosorior pong18:20
jaosoriorkfarr: Are you gonna do any further changes to your barbican CR?18:20
jaosoriorkfarr: was thinking of starting to code the keystone part18:21
kfarrTo that particular CR, no.  The only changes that need to be made are the keystone ones18:21
kfarrjaosorior ^^18:22
jaosoriorkfarr: alright, I'll start working on it then18:24
kfarrjaosorior thanks!!18:38
*** zz_dimtruck is now known as dimtruck18:38
*** david-lyle has quit IRC18:42
jaosoriorkfarr: I see that in the CR some sections of a "barbican" group are fetched from the conf file. Is there an example conf file in the repo already? I'm not finding it18:45
kfarrjaosorior, no, I need to add that18:46
jaosoriorcan you do that? I'll just fetch your newer CR18:49
jaosoriorkfarr: ^^18:49
rm_workthere is no reason barbican can't run on MySQL, right?18:52
rm_worksomeone is pointing at https://github.com/cloudkeep/barbican/wiki/Architecture and saying it says barbican is postgres only >_>18:52
rm_workabout to reply "should be fine on mysql" but figured I'd check first18:52
*** david-lyle has joined #openstack-barbican18:53
kfarrjaosorior gah, that work is on a different computer, I'll try to recreate it18:53
reaperhulkrm_work yeah it's all sqlalchemy18:53
reaperhulkit runs on sqlite just fine so it will run on mysql18:54
rm_workyeah that is what i thought18:54
rm_workyeah18:54
rm_workmy draft was:18:54
rm_work"Barbican is using SQLAlchemy, so I assume PostgreSQL is not a hard requirement. I know it deploys fine with SQLite for local development, and I am not aware of anything that would prevent it from running on MySQL."18:54
jvrbanacrm_work, I believe it uses MySQL in devstack18:54
*** dave-mccowan has quit IRC18:57
rm_workcool, thansk18:59
rm_work*thanks18:59
jaosoriorkfarr: It's alright, I'll wait, still researching some stuff anyway18:59
jvrbanacrellerreller, jaosorior, alee, woodster_, we need one more vote for chellygel to join core. :D18:59
*** david-lyle has quit IRC19:08
*** Kevin_Bishop has joined #openstack-barbican19:19
*** lee_calcote has joined #openstack-barbican19:20
lee_calcoteIs Barbican a KMIP compliant key manager or client or both?19:21
rm_workwoo chellygel :)19:22
redrobotlee_calcote Barbican uses a pluggable backend architecture for storage.  One of the plugin choices is a KMIP plugin that can do storage in a KMIP device.19:27
redrobotlee_calcote front end is a json RESTful API19:27
*** Kevin_Bishop has quit IRC19:28
chellygelrm_work, no woo yet, still need a vote19:28
chellygelplenty of time for vetos :P19:28
chellygelvetoes *19:28
rm_workyeah but who would veto chellygel19:28
rm_workhave you met chellygel? :P19:28
jvrbanac:D19:28
chellygeli hear she makes good cookies.19:28
*** kfarr has quit IRC19:29
lee_calcoteredrobot thanks. if i have a kmip client that wants to store keys in barbican as a central, replicated store, can I use barbican for this?19:29
redrobotlee_calcote I don't think that's possible now.  Your client would be speaking KMIP, but barbican only listens in REST.   You would need a KMIP -> Barbican REST API proxy to make it work.19:32
openstackgerritMerged openstack/barbican: Split out generate mkek and hmac from get command  https://review.openstack.org/18463920:04
rm_workreaperhulk: does cryptography have an easy way to validate that a cert and PK are a valid pair?20:05
*** jamielennox|away is now known as jamielennox20:15
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: ** DO NOT MERGE **  https://review.openstack.org/17488020:16
*** jamielennox is now known as jamielennox|away20:16
*** everjeje has quit IRC20:17
reaperhulkrm_work: not right now20:19
*** dave-mccowan has joined #openstack-barbican20:23
*** kebray has joined #openstack-barbican20:28
*** dave-mccowan has quit IRC20:32
*** david-lyle has joined #openstack-barbican20:35
*** dimtruck is now known as zz_dimtruck20:50
*** kebray has quit IRC20:53
openstackgerritJuan Antonio Osorio Robles proposed openstack/castellan: Add Barbican key manager  https://review.openstack.org/17191820:57
jaosoriorhockeynut: ping21:00
hockeynutjaosorior yessir21:00
jaosoriorhockeynut: what was the reason again why the tempest config is being removed in this CR? https://review.openstack.org/#/c/180686/721:00
hockeynutto be consistent with the API tests21:01
hockeynutplus we can get ready if (when?) we move to tempest-lib or some other tempesty thing.  this makes us more stand-alone for now21:01
jaosoriorhockeynut: fair enough21:03
*** alee has quit IRC21:03
*** lee_calc_ has joined #openstack-barbican21:10
*** lee_calc_ has quit IRC21:13
*** lee_calc_ has joined #openstack-barbican21:13
jaosoriorkfarr: can you point me to where the key manager library is being used? I think it would be a lot easier if we just pass a keystone session object instead of a context, and I wanna see if that's possible21:14
*** lee_calcote has quit IRC21:15
openstackgerritMerged openstack/python-barbicanclient: Remove instances of _base_url  https://review.openstack.org/18430921:16
*** david-lyle has quit IRC21:17
openstackgerritMerged openstack/python-barbicanclient: Add capability of specifying Barbican version to client  https://review.openstack.org/18436221:20
*** david-lyle has joined #openstack-barbican21:23
*** alee has joined #openstack-barbican21:35
*** kebray has joined #openstack-barbican21:45
*** kebray has quit IRC21:46
*** kebray has joined #openstack-barbican21:46
*** kebray_ has joined #openstack-barbican21:48
*** kebray has quit IRC21:49
*** lee_calc_ has quit IRC21:50
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: ** DO NOT MERGE **  https://review.openstack.org/17488021:52
redrobothttps://review.openstack.org/18487421:54
*** jamielennox|away is now known as jamielennox21:58
redrobotreaperhulk oh fun, there's an oslo session on concurrency up next22:00
reaperhulkoh, ha22:01
reaperhulkI bet glyph will be there22:01
reaperhulkwhat room?22:01
redrobotreaperhulk http://libertydesignsummit.sched.org/event/39fdc4293d241549e77c845385d293b422:03
*** jamielennox is now known as jamielennox|away22:17
*** SheenaG has joined #openstack-barbican22:21
*** chlong has quit IRC22:23
*** atiwari has joined #openstack-barbican22:35
*** nelsnelson has quit IRC22:39
*** kebray_ has quit IRC22:43
*** david-lyle has quit IRC22:48
*** SheenaG has left #openstack-barbican22:50
*** atiwari has quit IRC22:52
*** atiwari has joined #openstack-barbican22:53
*** david-lyle has joined #openstack-barbican22:54
*** atiwari has quit IRC22:58
*** atiwari has joined #openstack-barbican23:04
*** david-lyle has quit IRC23:08
*** atiwari has quit IRC23:10
*** chlong has joined #openstack-barbican23:16
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: ** DO NOT MERGE **  https://review.openstack.org/17488023:20
*** kfarr has joined #openstack-barbican23:25
*** jamielennox|away is now known as jamielennox23:29
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Fix Dogtag setup script  https://review.openstack.org/17488023:40
*** kebray has joined #openstack-barbican23:41
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Fix Dogtag setup script  https://review.openstack.org/17488023:42
*** kfarr has quit IRC23:55
*** kebray has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!