*** su_zhang has quit IRC | 00:04 | |
*** su_zhang has joined #openstack-barbican | 00:05 | |
*** jamielennox is now known as jamielennox|away | 00:10 | |
*** su_zhang has quit IRC | 00:12 | |
*** su_zhang has joined #openstack-barbican | 00:12 | |
*** diazjf1 has quit IRC | 00:34 | |
*** gyee has joined #openstack-barbican | 01:21 | |
*** su_zhang has quit IRC | 01:24 | |
*** hyakuhei has joined #openstack-barbican | 01:24 | |
*** ccneill has quit IRC | 01:32 | |
*** jamielennox|away is now known as jamielennox | 01:34 | |
*** hyakuhei has quit IRC | 01:52 | |
*** shakamunyi has joined #openstack-barbican | 01:58 | |
*** shakamunyi has quit IRC | 02:12 | |
*** shakamunyi has joined #openstack-barbican | 02:32 | |
*** jhfeng has joined #openstack-barbican | 02:42 | |
*** zz_dimtruck is now known as dimtruck | 02:43 | |
*** diazjf has joined #openstack-barbican | 02:48 | |
*** dave-mccowan has quit IRC | 02:54 | |
*** hyakuhei has joined #openstack-barbican | 02:57 | |
*** jhfeng has quit IRC | 03:00 | |
*** diazjf has quit IRC | 03:01 | |
*** su_zhang has joined #openstack-barbican | 03:09 | |
*** gyee has quit IRC | 03:09 | |
*** hyakuhei has quit IRC | 03:20 | |
*** jhfeng has joined #openstack-barbican | 03:26 | |
*** hyakuhei has joined #openstack-barbican | 03:33 | |
*** dave-mccowan has joined #openstack-barbican | 03:35 | |
hyakuhei | reaperhulk: you around? | 03:35 |
---|---|---|
*** woodster_ has quit IRC | 03:46 | |
openstackgerrit | Jeff Feng proposed openstack/barbican: Fixing pkcs11_kek_rewrap script https://review.openstack.org/279371 | 03:48 |
*** jhfeng has quit IRC | 03:49 | |
*** Nirupama has joined #openstack-barbican | 03:59 | |
*** su_zhang has quit IRC | 04:11 | |
*** sidx64 has joined #openstack-barbican | 04:18 | |
*** hyakuhei has quit IRC | 04:19 | |
*** sidx64_Cern has joined #openstack-barbican | 04:21 | |
*** hyakuhei has joined #openstack-barbican | 04:21 | |
*** sidx64 has quit IRC | 04:24 | |
*** dave-mccowan has quit IRC | 04:28 | |
*** jhfeng has joined #openstack-barbican | 04:35 | |
*** jhfeng has quit IRC | 05:08 | |
*** tdink_afk has quit IRC | 05:09 | |
*** tdink has joined #openstack-barbican | 05:09 | |
*** spotz_zzz has quit IRC | 05:10 | |
*** dimtruck has quit IRC | 05:10 | |
*** jillysciarilly has quit IRC | 05:10 | |
*** hockeynut has quit IRC | 05:10 | |
*** rm_work has quit IRC | 05:11 | |
*** stevemar has quit IRC | 05:11 | |
*** hockeynut has joined #openstack-barbican | 05:12 | |
*** dimtruck has joined #openstack-barbican | 05:12 | |
*** jillysciarilly has joined #openstack-barbican | 05:12 | |
*** stevemar has joined #openstack-barbican | 05:13 | |
*** spotz_zzz has joined #openstack-barbican | 05:16 | |
*** rm_work has joined #openstack-barbican | 05:18 | |
*** chlong has quit IRC | 05:19 | |
*** jaosorior has joined #openstack-barbican | 05:20 | |
openstackgerrit | Jeff Feng proposed openstack/barbican: Fixing pkcs11_kek_rewrap script https://review.openstack.org/279371 | 05:20 |
*** su_zhang has joined #openstack-barbican | 05:25 | |
*** fnaval has quit IRC | 05:31 | |
*** chlong has joined #openstack-barbican | 05:33 | |
*** fnaval has joined #openstack-barbican | 05:41 | |
*** chlong has quit IRC | 05:42 | |
*** chlong has joined #openstack-barbican | 05:55 | |
*** jaosorior has quit IRC | 06:06 | |
*** jaosorior has joined #openstack-barbican | 06:06 | |
*** jaosorior has quit IRC | 06:06 | |
*** jaosorior has joined #openstack-barbican | 06:11 | |
*** chlong has quit IRC | 06:11 | |
*** chlong has joined #openstack-barbican | 06:35 | |
*** hyakuhei has quit IRC | 06:54 | |
*** diazjf_mobile has joined #openstack-barbican | 06:55 | |
*** su_zhang has quit IRC | 06:57 | |
*** diazjf_mobile has quit IRC | 06:58 | |
*** chlong has quit IRC | 07:03 | |
*** dimtruck is now known as zz_dimtruck | 07:13 | |
*** scheuran has joined #openstack-barbican | 07:45 | |
*** su_zhang has joined #openstack-barbican | 07:49 | |
*** shohel has joined #openstack-barbican | 08:05 | |
*** su_zhang has quit IRC | 08:11 | |
*** sid_cerner has joined #openstack-barbican | 08:30 | |
*** sidx64_Cern has quit IRC | 08:34 | |
*** openstackgerrit has quit IRC | 10:32 | |
*** openstackgerrit has joined #openstack-barbican | 10:32 | |
*** spotz_zzz is now known as spotz | 10:33 | |
*** scheuran has quit IRC | 11:57 | |
*** sid_cerner has quit IRC | 12:02 | |
*** sid_cerner has joined #openstack-barbican | 12:04 | |
*** dave-mccowan has joined #openstack-barbican | 12:08 | |
*** spotz is now known as spotz_zzz | 13:02 | |
*** scheuran has joined #openstack-barbican | 13:29 | |
*** peter-hamilton has joined #openstack-barbican | 13:32 | |
*** Nirupama has quit IRC | 13:50 | |
*** jaosorior has quit IRC | 14:06 | |
*** jaosorior has joined #openstack-barbican | 14:06 | |
*** hyakuhei has joined #openstack-barbican | 14:07 | |
*** rellerreller has joined #openstack-barbican | 14:32 | |
*** jmckind has joined #openstack-barbican | 14:39 | |
*** jmckind_ has joined #openstack-barbican | 14:40 | |
*** su_zhang has joined #openstack-barbican | 14:41 | |
*** jmckind has quit IRC | 14:44 | |
*** peter-hamilton has quit IRC | 15:01 | |
*** dave-mccowan has quit IRC | 15:01 | |
*** edtubill has joined #openstack-barbican | 15:04 | |
*** jaosorior has quit IRC | 15:13 | |
*** jaosorior has joined #openstack-barbican | 15:14 | |
*** jhfeng has joined #openstack-barbican | 15:15 | |
*** dave-mccowan has joined #openstack-barbican | 15:17 | |
*** nelsnelson has joined #openstack-barbican | 15:18 | |
*** jsavak has joined #openstack-barbican | 15:20 | |
*** zz_dimtruck is now known as dimtruck | 15:20 | |
*** nelsnels_ has quit IRC | 15:21 | |
*** kfarr has joined #openstack-barbican | 15:25 | |
*** nkinder has joined #openstack-barbican | 15:28 | |
*** mragupat has joined #openstack-barbican | 15:32 | |
*** mp1 has joined #openstack-barbican | 15:39 | |
*** spotz_zzz is now known as spotz | 15:40 | |
*** scheuran has quit IRC | 15:43 | |
*** silos has joined #openstack-barbican | 15:52 | |
openstackgerrit | Tobias Zatti proposed openstack/barbican: Implemented Symantec plugin made from Symantec https://review.openstack.org/273590 | 15:54 |
*** jmckind has joined #openstack-barbican | 15:55 | |
*** jmckind__ has joined #openstack-barbican | 15:57 | |
*** sid_cerner has quit IRC | 15:58 | |
*** fnaval has quit IRC | 15:59 | |
*** jmckind_ has quit IRC | 15:59 | |
*** jmckind has quit IRC | 16:01 | |
*** mp1 has quit IRC | 16:09 | |
*** fnaval has joined #openstack-barbican | 16:19 | |
*** mp1 has joined #openstack-barbican | 16:29 | |
*** woodster_ has joined #openstack-barbican | 16:39 | |
*** ccneill has joined #openstack-barbican | 16:40 | |
openstackgerrit | Jeff Feng proposed openstack/barbican: Fixing pkcs11_kek_rewrap script https://review.openstack.org/279371 | 16:44 |
*** ccneill_ has joined #openstack-barbican | 16:47 | |
*** jaosorior has quit IRC | 16:48 | |
*** ccneill has quit IRC | 16:50 | |
*** su_zhang has quit IRC | 16:56 | |
*** kfarr has quit IRC | 16:59 | |
*** jaosorior has joined #openstack-barbican | 17:04 | |
*** ccneill_ has quit IRC | 17:14 | |
*** gyee has joined #openstack-barbican | 17:14 | |
openstackgerrit | Merged openstack/barbican: Document Symmetric Secret Type https://review.openstack.org/171488 | 17:15 |
*** markvoelker has joined #openstack-barbican | 17:16 | |
*** openstackgerrit has quit IRC | 17:17 | |
*** openstackgerrit has joined #openstack-barbican | 17:17 | |
*** mp1 has quit IRC | 17:27 | |
*** jsavak has quit IRC | 17:34 | |
*** mp1 has joined #openstack-barbican | 17:42 | |
*** jaosorior has quit IRC | 17:44 | |
*** mp1 has quit IRC | 18:01 | |
*** mp1 has joined #openstack-barbican | 18:01 | |
*** dimtruck is now known as zz_dimtruck | 18:05 | |
*** su_zhang has joined #openstack-barbican | 18:06 | |
*** hyakuhei has quit IRC | 18:19 | |
*** hyakuhei has joined #openstack-barbican | 18:21 | |
*** openstack has joined #openstack-barbican | 18:25 | |
*** rellerreller_ has joined #openstack-barbican | 18:29 | |
*** rellerreller has quit IRC | 18:30 | |
*** silos has quit IRC | 18:40 | |
*** jsavak has joined #openstack-barbican | 18:44 | |
*** openstackgerrit has quit IRC | 18:47 | |
*** openstackgerrit has joined #openstack-barbican | 18:47 | |
*** Asha has joined #openstack-barbican | 18:56 | |
Asha | Help | 19:01 |
Asha | Hi hockeynut | 19:02 |
Asha | I peeked at http://www.gossamer-threads.com/lists/openstack/dev/37407e link pointed by you | 19:04 |
Asha | that does'nt help , since I am runnuing the functional testcases against the barbican integraed with https configured kyestone | 19:05 |
Asha | keystone * | 19:05 |
*** zz_dimtruck is now known as dimtruck | 19:10 | |
Asha | Does anyone in the chat room can help me in running functional testcases of barbican integrated with keystone https based server | 19:12 |
Asha | Changed https://github.com/openstack/barbican/blob/master/functionaltests/common/client.py around line 261 (call_kwargs) and add verify:False | 19:17 |
Asha | Please find the sample kwargs which I printed : | 19:19 |
Asha | kwargs values are {'headers': {'Content-Type': 'application/json', 'Accept': 'application/json'}, 'verify': False, 'data': '{"bit_length": 256, "payload": "AQIDBAUGBwgBAgMEBQYHCAECAwQFBgcIAQIDBAUGBwg=", "payload_content_encoding": "base64", "payload_content_type": "application/octet-stream", "algorithm": "aes", "expiration": "2018-02-28T19:14:44.180394", "name": "AES key", "mode": "cbc"}', 'params': None, 'timeout': 10, 'url' | 19:19 |
*** jsavak has quit IRC | 19:30 | |
hockeynut | hi Asha - checking. I believe we've used that before in our testing here. | 19:38 |
*** silos has joined #openstack-barbican | 19:39 | |
Asha | Thanks hockeynut | 19:40 |
hockeynut | Asha IIRC the problem is with authentication to keystone right? | 19:41 |
* hockeynut scrolls up | 19:42 | |
Asha | yeah | 19:43 |
Asha | let me try printing the error message | 19:43 |
Asha | ~~~~~~~~~~~~~~~ Traceback (most recent call last): File "/root/barbican/functionaltests/api/v1/functional/test_secrets.py", line 155, in test_secret_create_then_check_content_types resp, secret_ref = self.behaviors.create_secret(test_model) File "/root/barbican/functionaltests/api/v1/behaviors/secret_behaviors.py", line 36, in create_secret user_name=user_name) File "/root/barbican/functi | 19:44 |
Asha | last few lines : | 19:44 |
Asha | File "/root/barbican/.tox/functional/lib/python2.7/site-packages/keystoneclient/httpclient.py", line 589, in authenticate resp = self.get_raw_token_from_identity_service(**kwargs) File "/root/barbican/.tox/functional/lib/python2.7/site-packages/keystoneclient/v3/client.py", line 311, in get_raw_token_from_identity_service _('Authorization failed: %s') % e) keystoneauth1.exceptions.auth.Authorization | 19:44 |
Asha | keystoneauth1.exceptions.auth.AuthorizationFailure: Authorization failed: SSL exception connecting to https://keystone.service.os:35357/auth/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581) | 19:45 |
Asha | yeah hockeynut ,der is issue with IRC as well :) it's scrolls up | 19:46 |
hockeynut | what does your barbican-functional.conf have under [identity] for uri and version? | 19:48 |
Asha | uri=https://keystone.service.os:35357 version=v3 | 19:50 |
hockeynut | try without the port #. I don't use that in mine. | 19:52 |
Asha | oh k ..Let me try | 19:52 |
hockeynut | my identity is v2 so its url=https://myIdentityServer/v2.0. For v3 might need to add /v3/tokens or some other silliness | 19:56 |
Asha | yeah | 19:58 |
Asha | It did not work :( | 19:58 |
Asha | @ hockeynut , Why we do have to mention the version | 19:58 |
Asha | in URL | 19:59 |
Asha | since we have version=v3 | 19:59 |
hockeynut | I think its because v2 and v3 are a bit different in what they use - like /v2.0 versus /v3/tokens. Could probably update that and append to the URL based on the version #, but we don't do that right now | 19:59 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/278897 | 19:59 |
*** ccneill_ has joined #openstack-barbican | 20:02 | |
Asha | @hockeynut , but after changing the value at barbican-functional.conf :uri=https://keystone.service.os/v3 version=v3 | 20:07 |
Asha | https://keystone.service.os/v3/auth/tokens | 20:08 |
Asha | keystoneauth1.exceptions.auth.AuthorizationFailure: Authorization failed: SSL exception connecting to https://keystone.service.os/v3/auth/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581) | 20:08 |
Asha | It's something dealing with the certificates I guess | 20:09 |
hockeynut | looking at one more thing here | 20:09 |
Asha | Let me do a quick curl call to get the token on that machine | 20:09 |
*** Kevin_Zheng has quit IRC | 20:12 | |
hockeynut | Asha what version of python are you using? | 20:17 |
hockeynut | this is interesting: https://bugs.launchpad.net/cinder/+bug/1403068 | 20:19 |
openstack | Launchpad bug 1403068 in OpenStack Identity (keystone) "Tests fail with python 2.7.9" [High,Fix released] - Assigned to James Page (james-page) | 20:19 |
*** ccneill_ has quit IRC | 20:19 | |
hockeynut | gotta run and drop car off - back in a few | 20:19 |
Asha | sure hockeynut :) | 20:28 |
Asha | Thanks hockeynut for pointing out the link | 20:28 |
Asha | the python version I am using is 2.7.9 | 20:29 |
Asha | Dis seems intresting https://bugs.launchpad.net/cinder/+bug/1403068 , den how did your stuff with v2 work | 20:30 |
openstack | Launchpad bug 1403068 in OpenStack Identity (keystone) "Tests fail with python 2.7.9" [High,Fix released] - Assigned to James Page (james-page) | 20:30 |
*** ccneill_ has joined #openstack-barbican | 20:44 | |
*** dave-mccowan has quit IRC | 20:48 | |
*** silos has quit IRC | 20:53 | |
*** silos has joined #openstack-barbican | 20:54 | |
silos | Hey barbicaneers. I've been looking into Grenade to create a job that Barbican can use to test database changes and such. I'm running into some problems just running it. Anyone have any familiarity with it? | 20:57 |
*** rellerreller_ has quit IRC | 21:03 | |
*** hyakuhei has quit IRC | 21:05 | |
*** ccneill__ has joined #openstack-barbican | 21:07 | |
*** ccneill_ has quit IRC | 21:08 | |
woodster_ | silos: very glad you are looking into that, but I don't have experience using it myself | 21:09 |
silos | woodster_: thanks. It seems like something very beneficial to have. | 21:11 |
woodster_ | silos: we've wanted that for a while (I even think there is a wishlist launchpad bug for it) but no cycles to work on it | 21:13 |
woodster_ | silos: it would be nice to have zero-downtime tests too eventually, which test proper db insert/select behavior between a current commit and a previous one | 21:14 |
*** hyakuhei has joined #openstack-barbican | 21:15 | |
silos | woodster_: Ah ok. I'll keep that in mind. I think I'll attend the next QA meeting and mention we are interested in writing a grenade job. They should be able to help. | 21:19 |
*** jorge_munoz has joined #openstack-barbican | 21:28 | |
Asha | hi hockeynut | 21:31 |
*** jhfeng has quit IRC | 21:38 | |
*** jhfeng has joined #openstack-barbican | 21:38 | |
*** mp1 has quit IRC | 21:43 | |
*** hyakuhei has quit IRC | 21:43 | |
*** mp1 has joined #openstack-barbican | 21:44 | |
-openstackstatus- NOTICE: The infrastructure team is taking gerrit offline for maintenance this afternoon, beginning at 22:00 utc. We should have it back online around 23:00 utc. http://lists.openstack.org/pipermail/openstack-dev/2016-February/086195.html | 21:45 | |
*** jorge_munoz has quit IRC | 21:55 | |
*** jorge_munoz has joined #openstack-barbican | 21:56 | |
*** hyakuhei has joined #openstack-barbican | 21:56 | |
-openstackstatus- NOTICE: Gerrit is offline for maintenacne until 23:00 utc | 22:03 | |
*** ChanServ changes topic to "Gerrit is offline for maintenacne until 23:00 utc" | 22:03 | |
*** insequent has joined #openstack-barbican | 22:07 | |
*** ccneill__ is now known as ccneill | 22:24 | |
*** Asha has quit IRC | 22:25 | |
*** hyakuhei has quit IRC | 22:27 | |
*** hyakuhei has joined #openstack-barbican | 22:30 | |
*** Asha has joined #openstack-barbican | 22:36 | |
Asha | hi hockeynut | 22:36 |
hockeynut | greetings Asha | 22:36 |
hockeynut | any luck? | 22:36 |
Asha | nopes , jus trying to figure out where we can create unverified SSL context | 22:37 |
Asha | by importing SSL and add to the urllib call | 22:38 |
Asha | Do u have any idea as to where do we need to add these statements | 22:40 |
*** hyakuhei has quit IRC | 22:41 | |
*** hyakuhei has joined #openstack-barbican | 22:43 | |
*** silos has left #openstack-barbican | 22:43 | |
Asha | When I do a a grep of urllib.urlopen by typing the command grep -rl "urllib.urlopen" | 22:45 |
Asha | I would get :./barbican/bandit.yaml ./barbican/.tox/pep8/lib/python2.7/site-packages/bandit/config/bandit.yaml ./barbican/.tox/pep8/lib/python2.7/site-packages/testrepository/repository/samba_buildfarm.py ./barbican/.tox/pep8/etc/bandit/bandit.yaml ./barbican/.tox/docs/lib/python2.7/site-packages/bandit/config/bandit.yaml ./barbican/.tox/docs/lib/python2.7/site-packages/testrepository/repository/samba_buildfarm.py ./barbican/ | 22:45 |
Asha | not sure which file need to be edited | 22:46 |
hockeynut | the functional tests go thru requests package - see functionaltests/common/auth.py | 22:47 |
Asha | @ hockeynut , How did your stuff work with V2 if the actual issue is with SSL | 22:48 |
hockeynut | apologies - requests isn't used here - was looking at that earier so I have requests on the brain | 22:48 |
Asha | no problem :) u need not apologize :) | 22:48 |
*** hyakuhei has quit IRC | 22:48 | |
hockeynut | our endpt is v2 with SSL and it seems plenty happy - both connecting from barbican server and as well from the functional tests. from the auth.py it flows into keystoneclient (v3/client.py for you) | 22:49 |
Asha | Okay ...I am haviing look :) Thanks | 22:52 |
*** spotz is now known as spotz_zzz | 22:54 | |
*** jhfeng has quit IRC | 22:55 | |
-openstackstatus- NOTICE: Gerrit is offline for maintenance, ETA updated to 23:30 utc | 23:04 | |
*** ChanServ changes topic to "Gerrit is offline for maintenance, ETA updated to 23:30 utc" | 23:04 | |
*** hyakuhei has joined #openstack-barbican | 23:12 | |
*** jmckind__ has quit IRC | 23:12 | |
*** ccneill has quit IRC | 23:27 | |
*** hyakuhei has quit IRC | 23:32 | |
-openstackstatus- NOTICE: Gerrit is offline for maintenance, ETA updated to 23:59 utc | 23:39 | |
*** ChanServ changes topic to "Gerrit is offline for maintenance, ETA updated to 23:59 utc" | 23:39 | |
*** markvoelker has quit IRC | 23:41 | |
*** mragupat has quit IRC | 23:52 | |
*** mragupat has joined #openstack-barbican | 23:55 | |
*** mragupat has quit IRC | 23:57 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!