| *** su_zhang has quit IRC | 00:04 | |
| *** jaosorior has quit IRC | 00:06 | |
| *** jaosorior has joined #openstack-barbican | 00:06 | |
| *** woodster_ has quit IRC | 00:09 | |
| *** kebray has quit IRC | 00:20 | |
| *** chlong has quit IRC | 00:25 | |
| *** vivek-ebay has quit IRC | 00:33 | |
| *** vivek-ebay has joined #openstack-barbican | 00:35 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Add reference guide documenting Certificate Authorities API https://review.openstack.org/226328 | 00:35 |
|---|---|---|
| openstackgerrit | Dave McCowan proposed openstack/barbican: Add reference guide documenting Certificate Authorities API https://review.openstack.org/226328 | 00:36 |
| *** vivek-ebay has quit IRC | 00:40 | |
| *** stevemar has joined #openstack-barbican | 00:57 | |
| *** david-lyle has quit IRC | 01:01 | |
| *** jorge_munoz has quit IRC | 01:17 | |
| *** jorge_munoz has joined #openstack-barbican | 01:19 | |
| *** gyee has quit IRC | 01:24 | |
| *** jorge_munoz has quit IRC | 01:26 | |
| *** chlong has joined #openstack-barbican | 01:28 | |
| openstackgerrit | Fernando Diaz proposed openstack/python-barbicanclient: Fix OS_PROJECT_ID not getting read by client https://review.openstack.org/227638 | 02:07 |
| *** nelsnelson has quit IRC | 02:19 | |
| *** nelsnelson has joined #openstack-barbican | 02:19 | |
| *** dave-mccowan has quit IRC | 02:20 | |
| openstackgerrit | Fernando Diaz proposed openstack/python-barbicanclient: Fix Incorrect Identity API version https://review.openstack.org/227639 | 02:30 |
| openstackgerrit | Fernando Diaz proposed openstack/python-barbicanclient: Fix error where barbican order create returns invalid error https://review.openstack.org/227642 | 02:54 |
| *** zz_dimtruck is now known as dimtruck | 03:34 | |
| *** vivek-ebay has joined #openstack-barbican | 03:55 | |
| *** mmdurrant_ is now known as mmdurrant | 03:55 | |
| *** dimtruck is now known as zz_dimtruck | 04:00 | |
| *** xaeth_afk is now known as xaeth | 04:13 | |
| *** vivek-ebay has quit IRC | 04:26 | |
| openstackgerrit | Fernando Diaz proposed openstack/python-barbicanclient: Fix Incorrect Identity API version https://review.openstack.org/227639 | 04:30 |
| *** diazjf has joined #openstack-barbican | 04:35 | |
| *** su_zhang has joined #openstack-barbican | 04:46 | |
| *** xaeth is now known as xaeth_afk | 05:00 | |
| *** stevemar has quit IRC | 05:02 | |
| *** stevemar has joined #openstack-barbican | 05:02 | |
| *** stevemar has quit IRC | 05:04 | |
| *** diazjf has quit IRC | 05:22 | |
| *** vivek-ebay has joined #openstack-barbican | 05:27 | |
| *** vivek-ebay has quit IRC | 05:31 | |
| *** shohel has joined #openstack-barbican | 05:57 | |
| *** openstackgerrit has quit IRC | 06:01 | |
| *** openstackgerrit has joined #openstack-barbican | 06:01 | |
| *** jamielennox is now known as jamielennox|away | 06:12 | |
| *** su_zhang_ has joined #openstack-barbican | 06:58 | |
| *** ryanpetrello has quit IRC | 06:58 | |
| *** su_zhang has quit IRC | 07:00 | |
| *** rm_work has quit IRC | 07:00 | |
| *** alee has quit IRC | 07:00 | |
| *** alee has joined #openstack-barbican | 07:00 | |
| *** jvrbanac has quit IRC | 07:00 | |
| *** jvrbanac has joined #openstack-barbican | 07:06 | |
| *** su_zhang_ has quit IRC | 07:13 | |
| *** everjeje has joined #openstack-barbican | 07:39 | |
| jaosorior | alee, what do you want to write to barbican.conf? | 07:45 |
| *** tkelsey has joined #openstack-barbican | 08:03 | |
| *** stevemar has joined #openstack-barbican | 08:04 | |
| *** stevemar has quit IRC | 08:08 | |
| *** jaosorior has quit IRC | 08:10 | |
| *** jaosorior has joined #openstack-barbican | 08:10 | |
| *** openstackgerrit has quit IRC | 08:16 | |
| *** openstackgerrit has joined #openstack-barbican | 08:16 | |
| *** darrenmoffat has quit IRC | 08:51 | |
| *** darrenmoffat has joined #openstack-barbican | 08:51 | |
| *** stevemar has joined #openstack-barbican | 10:05 | |
| *** stevemar has quit IRC | 10:08 | |
| *** mmdurrant has quit IRC | 10:09 | |
| *** rm_work has joined #openstack-barbican | 10:15 | |
| *** ryanpetrello has joined #openstack-barbican | 10:16 | |
| *** dave-mccowan has joined #openstack-barbican | 10:17 | |
| *** ryanpetrello has quit IRC | 10:20 | |
| *** rm_work has quit IRC | 10:22 | |
| *** tkelsey has quit IRC | 10:35 | |
| *** tkelsey has joined #openstack-barbican | 10:35 | |
| *** ryanpetrello has joined #openstack-barbican | 10:54 | |
| *** rm_work has joined #openstack-barbican | 10:55 | |
| *** ryanpetrello has quit IRC | 11:00 | |
| *** rm_work has quit IRC | 11:01 | |
| *** vivek-ebay has joined #openstack-barbican | 11:01 | |
| *** shohel has quit IRC | 11:04 | |
| *** shohel1 has joined #openstack-barbican | 11:04 | |
| *** vivek-ebay has quit IRC | 11:06 | |
| *** jaosorior has quit IRC | 11:56 | |
| *** mmdurrant has joined #openstack-barbican | 11:59 | |
| *** stevemar has joined #openstack-barbican | 12:06 | |
| *** stevemar has quit IRC | 12:09 | |
| *** jaosorior has joined #openstack-barbican | 12:11 | |
| *** shohel1 has quit IRC | 12:51 | |
| *** shohel has joined #openstack-barbican | 12:53 | |
| *** su_zhang has joined #openstack-barbican | 12:56 | |
| *** chlong has quit IRC | 12:57 | |
| *** vivek-ebay has joined #openstack-barbican | 13:03 | |
| dave-mccowan | arunkant ping | 13:07 |
| *** vivek-ebay has quit IRC | 13:07 | |
| *** spotz_zzz is now known as spotz | 13:20 | |
| *** nelsnels_ has joined #openstack-barbican | 13:25 | |
| *** nelsnelson has quit IRC | 13:25 | |
| *** nelsnels_ has quit IRC | 13:28 | |
| *** nelsnelson has joined #openstack-barbican | 13:29 | |
| *** rellerreller has joined #openstack-barbican | 13:34 | |
| rellerreller | I'm not a robot. | 13:35 |
| *** diazjf has joined #openstack-barbican | 13:36 | |
| dave-mccowan | initiating rellerreller turing test to test given assertion | 13:44 |
| rellerreller | haha | 13:44 |
| *** jmckind has joined #openstack-barbican | 13:46 | |
| jaosorior | what's up people :D | 13:46 |
| dave-mccowan | jaosorior how's it going oz? what are you doing for octoberfest? | 13:52 |
| jaosorior | dave-mccowan: Probably gonna drink beer haha. Dunno if they'll organize a festival in Helsinki (they did so last year) but I hope it happens | 13:53 |
| jaosorior | How's it going over there? | 13:54 |
| dave-mccowan | it's all good here. nothing too exciting is going on. | 13:56 |
| *** jhfeng has joined #openstack-barbican | 13:59 | |
| jaosorior | dave-mccowan: regarding this CR https://review.openstack.org/#/c/226328 one last comment before I +2 . It's a quick one though | 14:00 |
| dave-mccowan | jaosorior cool. thanks. | 14:02 |
| *** zz_dimtruck is now known as dimtruck | 14:02 | |
| *** kebray has joined #openstack-barbican | 14:02 | |
| alee | dave-mccowan, yo - I thinkI found a bug | 14:04 |
| dave-mccowan | alee just one? | 14:04 |
| alee | dave-mccowan :) | 14:04 |
| alee | dave-mccowan, sadly no - which is why I have not send out the dogtag patch yet, but this is with the snakeoil plugin | 14:05 |
| dave-mccowan | alee the one you added a note about on the etherpad? | 14:05 |
| alee | dave-mccowan, maybe you can fix it and write a functional test for it ? yup | 14:06 |
| alee | dave-mccowan, the issue is line .. | 14:06 |
| *** stevemar has joined #openstack-barbican | 14:06 | |
| alee | line 362 of snakeoil_plugin.py | 14:07 |
| alee | ca_id = plugin_meta.get('plugin_ca_id') | 14:07 |
| alee | we get the ca_id from the plugin_meta | 14:07 |
| alee | however, in line 141 of certificate_resources.py, we do this .. | 14:09 |
| *** stevemar has quit IRC | 14:09 | |
| alee | barbican_meta_for_plugins_dto.plugin_ca_id = ca.plugin_ca_id | 14:09 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/python-barbicanclient: Create Openstack CLI plugin for Barbican https://review.openstack.org/198732 | 14:10 |
| alee | so I think line 362 in the snakeoil_plugin.py should look like --> ca_id = barbican_meta_dto.plugin_ca_id | 14:11 |
| alee | dave-mccowan, make sense? | 14:11 |
| dave-mccowan | alee yep. got it. | 14:11 |
| alee | dave-mccowan, I'm still fighting the good fight on the dogtag plugin -- not ready to give up just yet -- so fi you could fix that, that would be great! | 14:12 |
| dave-mccowan | alee sounds good. | 14:13 |
| *** diazjf has quit IRC | 14:15 | |
| dave-mccowan | alee will the dogtag plugin store all the meta for a CA? snakeoil only stores the cert/key/chain and not the name/description/subject. this is why snakeoil can't add new CAs through refresh table. | 14:15 |
| alee | dave-mccowan, oh yes -- dogtag plugin will store all that | 14:16 |
| alee | dave-mccowan, in fact it will come from the backend ca | 14:16 |
| alee | dave-mccowan, so it wont be stored in the plugin, but will come from the ca directly | 14:16 |
| dave-mccowan | alee awesome. i'm going to add a patch so barbican won't fall over when snakeoil tries to add a CA with no meta info. i'll have barbican just log an error and ignore the add_ca request. does that make sense? | 14:17 |
| alee | dave-mccowan, yup -- or you can make up some values for the name/description | 14:19 |
| alee | and keep those consistent | 14:19 |
| *** stevemar has joined #openstack-barbican | 14:20 | |
| jaosorior | alee: yesterday you were asking if it was possible for a plugin to modify barbican.conf. I think not, why did you ask? | 14:21 |
| dave-mccowan | alee what about project_id for subcas? | 14:22 |
| alee | jaosorior, I wanted to store some data there -- no worries, chose to store it differently | 14:23 |
| *** david-lyle has joined #openstack-barbican | 14:23 | |
| jaosorior | alee: Arlgith | 14:23 |
| alee | jaosorior, dave-mccowan going to put up the in-progress dogtag update so you can poke at it .. | 14:23 |
| alee | dave-mccowan, thinking .. | 14:24 |
| jaosorior | alee: Sure | 14:24 |
| *** silos has joined #openstack-barbican | 14:26 | |
| *** pglass has joined #openstack-barbican | 14:29 | |
| *** edtubill has joined #openstack-barbican | 14:34 | |
| *** jorge_munoz has joined #openstack-barbican | 14:34 | |
| *** david-lyle has quit IRC | 14:35 | |
| *** shohel has quit IRC | 14:35 | |
| alee | dave-mccowan, so the snakeoil update was failing because it was not sending back the right name/description/subject | 14:36 |
| dave-mccowan | alee right. None values for all. | 14:37 |
| alee | dave-mccowan, subject? | 14:37 |
| dave-mccowan | alee maybe not. it pulls that from the cert, right? | 14:38 |
| alee | dave-mccowan, yeah -- I'm looking at the plugin contract and seeing whats there .. | 14:39 |
| alee | dave-mccowan, I see name, description, signijng cert, intermediates, expiration | 14:40 |
| alee | dave-mccowan, all indexed by plugin_ca_id | 14:41 |
| alee | in a big dict | 14:41 |
| alee | at least thats what the comments say .. | 14:41 |
| alee | if we need something else in practice .. | 14:42 |
| alee | dave-mccowan, I see -- subject is there in the subca creation case because it is needed to actually create the cert | 14:45 |
| alee | dave-mccowan, but that isn't passed in and stored as part of the ca created - even by the snakeoil plugin | 14:48 |
| alee | dave-mccowan, so -- from the plugin, you can only get name, description, signing cert, intermediates, expiration | 14:48 |
| alee | dave-mccowan, for snakeoil cas, if we have an addtion to we can just make up a name -- name = snakeoil ca {plugin_ca_id} | 14:49 |
| alee | and description similar | 14:50 |
| alee | we have the signing cert and intermediates | 14:50 |
| alee | hmm .. | 14:50 |
| alee | problem with making them up though is that you could potentially end up overwriting what someone else put in as part of the update. | 14:51 |
| alee | dave-mccowan, so yeah - the solution is .. | 14:52 |
| alee | 1) on subca creation , snakeoil needs to store the name, description in a file | 14:52 |
| alee | 2) that file can be read later if we've blown everything else away | 14:53 |
| alee | on refresh | 14:53 |
| alee | 3) none of the projects know anything about project_id -- that is purely at the barbican core level. So if there are new updates they must come in as root level cas | 14:55 |
| dave-mccowan | alee i was thinking that solution would be on the wishlist for snakeoil. in the meantime, i'll do a quick patch so barbican doesn't barf whenever a plugin give unexpected data. (which is a good idea anyways). | 14:55 |
| alee | dave-mccowan, yup - fine with me | 14:56 |
| alee | dave-mccowan, for dogtag, that wont be an issue because we already have a backing store for all the data --- the dotag ca itself. | 14:57 |
| *** david-lyle has joined #openstack-barbican | 15:02 | |
| openstackgerrit | Ade Lee proposed openstack/barbican: Add subca functionality to the dogtag plugin https://review.openstack.org/227893 | 15:03 |
| alee | jaosorior, dave-mccowan posted up the dogtag patch for review if you want to take a gander. I'm still working on unit tests and functional tests | 15:06 |
| alee | so nothing official till those show up | 15:06 |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Catch exceptions raised by bad certificate plugin info https://review.openstack.org/227902 | 15:17 |
| *** david-lyle has quit IRC | 15:18 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Add reference guide documenting Certificate Authorities API https://review.openstack.org/226328 | 15:19 |
| dave-mccowan | jaosorior ^^ | 15:19 |
| *** kebray has quit IRC | 15:20 | |
| *** david-lyle has joined #openstack-barbican | 15:20 | |
| *** ccneill has joined #openstack-barbican | 15:27 | |
| jaosorior | dave-mccowan: +2 given | 15:29 |
| silos | dave-mccowan: there's some funny output on that CR. | 15:29 |
| silos | dave-mccowan: When turned it into an html page lines 566, 630, 883 I don't think are formatted correctly. | 15:30 |
| *** david-lyle has quit IRC | 15:34 | |
| alee | dave-mccowan, in your patch above, where was snakeoil update failing? on the add_ca()? | 15:36 |
| dave-mccowan | alee i can make it fail in either of the places i added exceptions. | 15:39 |
| alee | :) | 15:39 |
| alee | eaual opprotunity failure .. | 15:40 |
| alee | dave-mccowan, looking at the ref guide -- looks good. | 15:43 |
| alee | dave-mccowan, nice semicolon usage :) | 15:43 |
| *** david-lyle has joined #openstack-barbican | 15:44 | |
| arunkant | dave-mccowan: pong | 15:44 |
| dave-mccowan | arunkant nevermind... i was looking for someone from HP, but i found him. | 15:46 |
| dave-mccowan | alee the semicolon is my favorite punctuation mark. :-) | 15:46 |
| alee | dave-mccowan, its rare to see it used correctly | 15:47 |
| arunkant | jaosorior : Can you re-review barbicanclient ACL patches. I think you have reviewed them earlier. Just addressed your earlier comments. | 15:47 |
| alee | dave-mccowan, ref guide looks good. will +2 once you fix the link issues found. | 15:48 |
| *** david-lyle has quit IRC | 15:48 | |
| alee | dave-mccowan, made one comment though .. | 15:49 |
| jaosorior | arunkant: I'm about to leave, but I'll review them in the weekend | 15:49 |
| alee | dave-mccowan, on removing project ca when it is preferred and there are other project cas. | 15:50 |
| alee | dave-mccowan, should we return 409 instead of 405? | 15:51 |
| dave-mccowan | alee i thought we had agreed on 403, but for the doc i just documented how it works today. | 15:51 |
| *** gyee has joined #openstack-barbican | 15:51 | |
| alee | dave-mccowan, so today we do 405? | 15:52 |
| dave-mccowan | alee yes | 15:52 |
| alee | 403 is not right -- thats auth. Itss a conflict scenario so I think 409 | 15:53 |
| alee | 405 means that the method POST, GET etc. is invalid | 15:53 |
| alee | and thats not right | 15:53 |
| arunkant | jaosorior: okay and thanks | 15:53 |
| alee | dave-mccowan, suggest we fix the code and doc to 409 | 15:54 |
| jaosorior | well, gotta go people. Have a nice Friday! :D | 15:54 |
| *** jaosorior has quit IRC | 15:55 | |
| dave-mccowan | jaosorior see ya ozz | 15:55 |
| dave-mccowan | alee +1 | 15:55 |
| dave-mccowan | alee https://review.openstack.org/#/c/222474/3/barbican/common/exception.py | 16:00 |
| *** xaeth_afk is now known as xaeth | 16:01 | |
| alee | dave-mccowan, you've caught me contradicting myself - and all in the same week :) | 16:03 |
| dave-mccowan | alee this code looks like 403, which is what we agreed to. let me double check on where i saw 405. | 16:03 |
| dave-mccowan | ah... can not delete root is 403 because the user can't resolve | 16:04 |
| dave-mccowan | alee can not delete preferred should be 409 because the user can resolve. | 16:05 |
| dave-mccowan | alee 405 is just wrong | 16:05 |
| alee | dave-mccowan, agreed | 16:05 |
| alee | dave-mccowan, right -- what you said -- cannot delete root is 403, cannot delete preferred is 409 | 16:06 |
| *** su_zhang has quit IRC | 16:14 | |
| alee | dave-mccowan, so I didn't contradict myself :) | 16:24 |
| alee | dave-mccowan, and if I did, I blame it on my other personality .. | 16:25 |
| dave-mccowan | alee yep. but we did leave a bug. there is no _assert_not_preferred() check for delete. | 16:25 |
| dave-mccowan | alee we check for remove, but not delete | 16:26 |
| alee | yup | 16:26 |
| alee | good catch | 16:26 |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Add reference guide documenting Certificate Authorities API https://review.openstack.org/226328 | 16:27 |
| *** vivek-ebay has joined #openstack-barbican | 16:45 | |
| *** xaeth is now known as xaeth_afk | 16:46 | |
| *** xaeth_afk is now known as xaeth | 16:53 | |
| *** su_zhang has joined #openstack-barbican | 17:03 | |
| *** jhfeng has quit IRC | 17:03 | |
| *** vivek-ebay has quit IRC | 17:06 | |
| *** ryanpetrello has joined #openstack-barbican | 17:22 | |
| *** rm_work has joined #openstack-barbican | 17:24 | |
| *** xaeth is now known as xaeth_afk | 17:25 | |
| *** dimtruck is now known as zz_dimtruck | 17:29 | |
| *** vivek-ebay has joined #openstack-barbican | 17:32 | |
| *** xaeth_afk is now known as xaeth | 17:34 | |
| *** tkelsey has quit IRC | 17:35 | |
| *** kfarr has joined #openstack-barbican | 17:40 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Fix Snakeoil to return expiration timestamp in string format https://review.openstack.org/226372 | 17:42 |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Add reference guide documenting Certificate Authorities API https://review.openstack.org/226328 | 17:48 |
| *** zz_dimtruck is now known as dimtruck | 17:56 | |
| *** xaeth is now known as xaeth_afk | 18:08 | |
| *** diazjf has joined #openstack-barbican | 18:18 | |
| *** kfarr has quit IRC | 18:22 | |
| *** chadlung has joined #openstack-barbican | 18:23 | |
| *** jhfeng has joined #openstack-barbican | 18:24 | |
| *** ryanpetrello has quit IRC | 18:31 | |
| *** ryanpetrello has joined #openstack-barbican | 18:32 | |
| *** su_zhang has quit IRC | 18:39 | |
| *** vivek-ebay has quit IRC | 18:46 | |
| *** woodster_ has joined #openstack-barbican | 18:47 | |
| openstackgerrit | Merged openstack/python-barbicanclient: Fix OS_PROJECT_ID not getting read by client https://review.openstack.org/227638 | 18:48 |
| *** diazjf1 has joined #openstack-barbican | 18:48 | |
| *** diazjf has quit IRC | 18:48 | |
| *** diazjf1 has quit IRC | 18:52 | |
| openstackgerrit | Christopher Solis proposed openstack/python-barbicanclient: Fix cas list request https://review.openstack.org/228001 | 18:55 |
| alee | woodster_, is our fearless leader out today? | 19:06 |
| redrobot | alee o/ | 19:06 |
| *** diazjf has joined #openstack-barbican | 19:10 | |
| *** vivek-ebay has joined #openstack-barbican | 19:13 | |
| spotz | hehe | 19:15 |
| alee | dave-mccowan, yo | 19:17 |
| openstackgerrit | Merged openstack/barbican: Add reference guide documenting Certificate Authorities API https://review.openstack.org/226328 | 19:17 |
| dave-mccowan | alee o/ | 19:17 |
| alee | dave-mccowan, how are we doing ? | 19:18 |
| alee | was talking to redrobot about rc1 | 19:18 |
| alee | dave-mccowan, I think we just need to fix snakeoil to select the right ca_id .. and mayeb the assert_not_preferred() for delete? | 19:18 |
| dave-mccowan | alee that's what i've got on the list too. | 19:20 |
| alee | dave-mccowan, you working on those? | 19:21 |
| dave-mccowan | alee i'm working on wrong_ca_id now. should be done shortly. | 19:22 |
| dave-mccowan | alee check-before-delete should be quick | 19:22 |
| alee | dave-mccowan, cool - let redrobot and me know when you have something up there .. | 19:23 |
| dave-mccowan | alee i need to recheck catch-exceptions. it crashed in the gate. | 19:23 |
| dave-mccowan | alee are you still going on the plugin? | 19:24 |
| alee | yup | 19:24 |
| *** ayee has joined #openstack-barbican | 19:25 | |
| openstackgerrit | Merged openstack/barbican: Ensure Alembic version modules bootstrap new db https://review.openstack.org/227543 | 19:26 |
| *** jhfeng has quit IRC | 19:34 | |
| *** jhfeng has joined #openstack-barbican | 19:34 | |
| *** ccneill has quit IRC | 19:34 | |
| *** xaeth_afk is now known as xaeth | 19:44 | |
| *** vivek-ebay has quit IRC | 19:44 | |
| *** su_zhang has joined #openstack-barbican | 19:47 | |
| *** xaeth is now known as xaeth_afk | 19:48 | |
| *** su_zhang_ has joined #openstack-barbican | 20:01 | |
| *** su_zhang has quit IRC | 20:03 | |
| *** xaeth_afk is now known as xaeth | 20:08 | |
| *** rellerreller has quit IRC | 20:08 | |
| *** tkelsey has joined #openstack-barbican | 20:09 | |
| *** tkelsey has quit IRC | 20:14 | |
| openstackgerrit | Merged openstack/barbican: Cleanup of Translations https://review.openstack.org/227493 | 20:17 |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Use subCA when specified to sign CSRs https://review.openstack.org/228032 | 20:22 |
| dave-mccowan | alee redrobot, alee ^^ | 20:23 |
| alee | dave-mccowan, awesome | 20:25 |
| *** su_zhang has joined #openstack-barbican | 20:26 | |
| dave-mccowan | alee ping | 20:28 |
| alee | dave-mccowan, pong | 20:29 |
| dave-mccowan | alee nm | 20:29 |
| *** su_zhang_ has quit IRC | 20:30 | |
| dave-mccowan | alee ping | 20:30 |
| alee | dave-mccowan, pong :) | 20:30 |
| dave-mccowan | alee :-) can a subordinate CA be a project CA or preferred CA? | 20:30 |
| alee | dave-mccowan, I think so yes | 20:31 |
| alee | dave-mccowan, note you can only delete subcas | 20:31 |
| dave-mccowan | alee when we delete a subCA, should be implicitly delete preferred and project records too? or 409 if they exist? | 20:32 |
| alee | I think we have been returning 409 if another project ca exists and the ca being deleted is the preferred ca | 20:33 |
| alee | dave-mccowan, specifically -- | 20:33 |
| alee | if the subca being deleted is a project ca and the preferred ca, and another project ca exists, then return 409 | 20:33 |
| alee | if another project ca does not exist -- then delete project, proefeered and sub ca | 20:34 |
| dave-mccowan | alee #agreed | 20:34 |
| openstackgerrit | Merged openstack/barbican: Fix Snakeoil to return expiration timestamp in string format https://review.openstack.org/226372 | 20:35 |
| alee | dave-mccowan, did you just hashtag me ? | 20:35 |
| alee | I'm feeling old .. | 20:35 |
| alee | (ie, not of the generation that hashtags stuff) | 20:36 |
| dave-mccowan | it was more a meeting bot command than a hashtag, in my mind, if that helps | 20:36 |
| *** vivek-ebay has joined #openstack-barbican | 20:44 | |
| *** vivek-ebay has quit IRC | 20:49 | |
| *** diazjf has quit IRC | 20:50 | |
| *** vivek-ebay has joined #openstack-barbican | 21:01 | |
| rm_work | alee: #yolo | 21:02 |
| rm_work | (I'm beginning to think that using #yolo ironically to make fun of the original people who said it is now BECOMING mainstream) | 21:03 |
| alee | rm_work, is it sad that I had to google that :) | 21:03 |
| alee | rm_work, and yeah yolo is pretty dumb | 21:05 |
| *** alee is now known as alee_afk | 21:08 | |
| *** vivek-ebay has quit IRC | 21:13 | |
| openstackgerrit | John Wood proposed openstack/barbican: Add missing changes for Alembic time-zero https://review.openstack.org/228050 | 21:15 |
| *** openstackgerrit has quit IRC | 21:16 | |
| woodster_ | chadlung: redrobot : Please +2/merge this tiny CR ^^^ if you can | 21:16 |
| *** openstackgerrit has joined #openstack-barbican | 21:16 | |
| chadlung | looking it over now | 21:17 |
| *** diazjf has joined #openstack-barbican | 21:18 | |
| *** jmckind has quit IRC | 21:28 | |
| *** xaeth is now known as xaeth_afk | 21:37 | |
| *** stevemar has quit IRC | 21:38 | |
| *** nelsnels_ has joined #openstack-barbican | 21:42 | |
| *** nelsnels_ has quit IRC | 21:42 | |
| *** spotz is now known as spotz_zzz | 21:44 | |
| *** nelsnelson has quit IRC | 21:44 | |
| *** vivek-ebay has joined #openstack-barbican | 21:45 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: WIP: Check a CA's status as project and preferred CA before deleting https://review.openstack.org/228061 | 21:46 |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Use subCA when specified to sign CSRs https://review.openstack.org/228032 | 21:50 |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Catch exceptions raised by bad certificate plugin info https://review.openstack.org/227902 | 21:51 |
| openstackgerrit | Dave McCowan proposed openstack/barbican: WIP: Check a CA's status as project and preferred CA before deleting https://review.openstack.org/228061 | 21:51 |
| *** chadlung has quit IRC | 21:54 | |
| *** jorge_munoz has quit IRC | 21:56 | |
| dhellmann | redrobot: how are things looking for rc1? still planning to land https://review.openstack.org/#/c/227411/ tonight? | 21:59 |
| redrobot | dhellmann waiting for https://bugs.launchpad.net/barbican/+bug/1499874 and https://bugs.launchpad.net/barbican/+bug/1499396 | 22:00 |
| openstack | Launchpad bug 1499874 in Barbican "SnakeOil Can Sign Certificates with wrong CA" [Critical,In progress] - Assigned to Dave McCowan (dave-mccowan) | 22:00 |
| openstack | Launchpad bug 1499396 in Barbican "Pare down the juno_initial Alembic version file" [Critical,In progress] - Assigned to John Wood (john-wood-w) | 22:00 |
| *** openstackgerrit has quit IRC | 22:01 | |
| *** openstackgerrit has joined #openstack-barbican | 22:01 | |
| woodster_ | redrobot: +2 that last CR to close https://bugs.launchpad.net/barbican/+bug/1499396 :) | 22:02 |
| openstack | Launchpad bug 1499396 in Barbican "Pare down the juno_initial Alembic version file" [Critical,In progress] - Assigned to John Wood (john-wood-w) | 22:02 |
| dave-mccowan | redrobot shall we put off https://review.openstack.org/228061 for issues with delete CA? | 22:03 |
| dave-mccowan | redrobot for 1499874, the fix is in the gate now. https://review.openstack.org/228032 | 22:04 |
| redrobot | dave-mccowan I'm not sure we should prevent deletion because of the "preferred" status | 22:05 |
| woodster_ | redrobot: dave-mccowan who else needs to review https://review.openstack.org/#/c/228032 | 22:06 |
| * woodster_ alee and myself have +2s | 22:06 | |
| dave-mccowan | woodster_, redrobot, alee. it already had a workflow, but failed in the final merge gate with a conflict. :-( | 22:06 |
| dave-mccowan | so it should be good to go now. :-) | 22:07 |
| dave-mccowan | unless alee disagrees, we can put off the delete change. the patch isn't working yet, redrobot has a design concern, and dave-mccowan needs to start friday night. :-D | 22:08 |
| *** redrobot_mobile has joined #openstack-barbican | 22:08 | |
| *** silos has left #openstack-barbican | 22:09 | |
| *** tkelsey has joined #openstack-barbican | 22:10 | |
| *** edtubill has quit IRC | 22:11 | |
| *** redrobot_ has joined #openstack-barbican | 22:14 | |
| *** tkelsey has quit IRC | 22:15 | |
| *** redrobot_mobile has quit IRC | 22:19 | |
| woodster_ | dave-mccowan: ha! | 22:21 |
| woodster_ | dave-mccowan: so I can workflow and +2 then? | 22:22 |
| woodster_ | dave-mccowan: can you consider +2/workflowing my 2 line CR?: https://review.openstack.org/#/c/228050/ | 22:23 |
| *** openstack has joined #openstack-barbican | 22:32 | |
| *** pglass has quit IRC | 22:35 | |
| dhellmann | redrobot: ack | 22:38 |
| *** stevemar has joined #openstack-barbican | 22:38 | |
| *** stevemar has quit IRC | 22:42 | |
| *** openstackstatus has quit IRC | 22:47 | |
| *** openstack has joined #openstack-barbican | 22:47 | |
| *** openstackstatus has joined #openstack-barbican | 22:47 | |
| *** ChanServ sets mode: +v openstackstatus | 22:47 | |
| *** jhfeng has quit IRC | 22:50 | |
| *** chadlung has joined #openstack-barbican | 22:55 | |
| *** chadlung has quit IRC | 22:59 | |
| *** dimtruck is now known as zz_dimtruck | 23:12 | |
| *** diazjf has quit IRC | 23:20 | |
| openstackgerrit | Merged openstack/barbican: Use subCA when specified to sign CSRs https://review.openstack.org/228032 | 23:30 |
| *** gyee has quit IRC | 23:35 | |
| openstackgerrit | Merged openstack/barbican: Add missing changes for Alembic time-zero https://review.openstack.org/228050 | 23:42 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!