| *** lixiaoy1_ has quit IRC | 01:23 | |
| *** dimtruck is now known as zz_dimtruck | 01:34 | |
| *** david-lyle has quit IRC | 03:11 | |
| *** hdd has joined #openstack-barbican | 03:44 | |
| *** edtubill has joined #openstack-barbican | 03:54 | |
| *** hdd has quit IRC | 04:29 | |
| *** edtubill has quit IRC | 05:01 | |
| *** jaosorior has joined #openstack-barbican | 05:08 | |
| *** david-lyle has joined #openstack-barbican | 06:02 | |
| *** pcaruana has joined #openstack-barbican | 06:29 | |
| *** david-lyle has quit IRC | 06:32 | |
| *** pcaruana has quit IRC | 06:48 | |
| *** andreas_s has joined #openstack-barbican | 06:53 | |
| *** pcaruana has joined #openstack-barbican | 07:02 | |
| *** fawadkhaliq has joined #openstack-barbican | 07:13 | |
| *** tkelsey has joined #openstack-barbican | 07:42 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Imported Translations from Zanata https://review.openstack.org/340128 | 08:24 |
|---|---|---|
| *** woodster_ has quit IRC | 08:29 | |
| *** jaosorior has quit IRC | 08:56 | |
| *** jaosorior has joined #openstack-barbican | 08:57 | |
| openstackgerrit | li,chen proposed openstack/barbican: Remove "KEYSTONE_" from URI for devsatck https://review.openstack.org/343532 | 09:32 |
| *** fawadkhaliq has quit IRC | 09:34 | |
| openstackgerrit | li,chen proposed openstack/barbican: Remove "KEYSTONE_" from URI for devsatck https://review.openstack.org/343532 | 09:44 |
| *** fawadkhaliq has joined #openstack-barbican | 10:34 | |
| *** fawadkhaliq has quit IRC | 10:40 | |
| *** gnuoy` has joined #openstack-barbican | 10:41 | |
| *** fawadkhaliq has joined #openstack-barbican | 10:48 | |
| *** dave-mccowan has joined #openstack-barbican | 11:52 | |
| *** dave-mcc_ has joined #openstack-barbican | 11:55 | |
| *** dave-mccowan has quit IRC | 11:57 | |
| *** fawadkhaliq has quit IRC | 12:10 | |
| *** permalac has joined #openstack-barbican | 12:11 | |
| *** AJaeger has joined #openstack-barbican | 13:06 | |
| AJaeger | barbican team, you have some new translations, could you import them, please? https://review.openstack.org/#/c/340128/ | 13:06 |
| *** gnuoy` is now known as gnuoy | 13:10 | |
| AJaeger | thanks jaosorior for approval! | 13:14 |
| jaosorior | Ajaeger: happy to help | 13:21 |
| *** kfarr has joined #openstack-barbican | 13:24 | |
| openstackgerrit | Merged openstack/barbican: Imported Translations from Zanata https://review.openstack.org/340128 | 13:37 |
| *** jmckind has joined #openstack-barbican | 13:38 | |
| gnuoy | Hi, I raised Bug #1603964 earlier today but its made me wonder whether I'm doing SSL termination in the correct Barbican'ey way. I'm using the apache running the mod_wsgi vhost to terminate the SSL connection (using mod_ssl). Is that the common approach? | 13:39 |
| openstack | bug 1603964 in python-barbicanclient "Certificate file passed via --os-cacert ignored" [Undecided,New] https://launchpad.net/bugs/1603964 | 13:39 |
| *** jmckind has quit IRC | 13:41 | |
| *** AJaeger has left #openstack-barbican | 13:41 | |
| jaosorior | gnuoy: You do need to configure barbican though | 13:44 |
| jaosorior | gnuoy: It doesn't really matter what you terminate it with, as long as you tell barbican that SSL was used in the proxy side | 13:45 |
| jaosorior | let me dig out what optino you needed to set | 13:45 |
| jaosorior | right | 13:45 |
| gnuoy | jaosorior, that would be great, thank you | 13:45 |
| jaosorior | so, you either need to set host_href, which basically hardcodes the endpoint | 13:46 |
| gnuoy | jaosorior, yep, I've done that | 13:46 |
| jaosorior | alright, so that should do it. The other option is to leave that blank, then you need to override the URL, which you could do via mod_ssl | 13:48 |
| gnuoy | jaosorior, great, sounds like my setup is sane then. Thanks. | 13:48 |
| jaosorior | gnuoy: No problem | 13:48 |
| jaosorior | gnuoy: By the way, with mod_ssl you could have apache do the verification of client certs | 13:51 |
| jaosorior | uhm, I'll take a look into that bug | 13:52 |
| gnuoy | jaosorior, unless I'm misunderstanding the issue the problem is entirely client side. The Barbican client seems to loose the local CA bundle so validation fails. | 13:52 |
| gnuoy | * lose | 13:52 |
| jaosorior | gnuoy: are you using the barbican-cli or the openstack cli plugin? | 13:53 |
| jaosorior | I really wanna deprecate barbican-cli; the plugin is better ;) | 13:53 |
| gnuoy | jaosorior, I'm typing "barbican blah" so I'm using the barbican-cli I guess ? | 13:54 |
| jaosorior | you are | 13:54 |
| jaosorior | can you do the same through the openstack command? | 13:54 |
| jaosorior | what version of barbican are you running? | 13:54 |
| jaosorior | well, from what release? | 13:54 |
| gnuoy | The server is Mitaka | 13:54 |
| jaosorior | is it newton? | 13:54 |
| gnuoy | jaosorior, I'll gather up some version info and try with the plugin and update the bug | 13:55 |
| jaosorior | gnuoy: Actually we have had the plugin from mitaka already | 13:55 |
| jaosorior | so you could just replace "barbican" with "openstack" | 13:56 |
| *** catintheroof has joined #openstack-barbican | 14:03 | |
| *** edtubill has joined #openstack-barbican | 14:32 | |
| *** spotz_zzz is now known as spotz | 14:34 | |
| *** nkinder has joined #openstack-barbican | 14:57 | |
| *** randallburt has joined #openstack-barbican | 15:01 | |
| *** randallburt1 has joined #openstack-barbican | 15:02 | |
| *** randallburt has quit IRC | 15:05 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/336167 | 15:15 |
| *** fawadkhaliq has joined #openstack-barbican | 15:49 | |
| *** andreas_s has quit IRC | 15:51 | |
| *** fawadkhaliq has quit IRC | 15:53 | |
| openstackgerrit | Max Abidi proposed openstack/barbican: Improve error handling for invalid resource ID https://review.openstack.org/343760 | 16:09 |
| *** diazjf has joined #openstack-barbican | 16:12 | |
| *** fawadkhaliq has joined #openstack-barbican | 16:20 | |
| *** fawadkhaliq has quit IRC | 16:24 | |
| *** hdd has joined #openstack-barbican | 16:27 | |
| *** gyee has joined #openstack-barbican | 16:29 | |
| *** jaosorior has quit IRC | 16:56 | |
| *** jaosorior has joined #openstack-barbican | 16:56 | |
| *** pcaruana has quit IRC | 16:59 | |
| *** zz_dimtruck has quit IRC | 17:05 | |
| *** tdink has quit IRC | 17:05 | |
| *** zigo has quit IRC | 17:06 | |
| *** spotz has quit IRC | 17:06 | |
| *** kencjohnston has quit IRC | 17:06 | |
| *** zigo has joined #openstack-barbican | 17:06 | |
| *** tkelsey has quit IRC | 17:10 | |
| *** kencjohnston has joined #openstack-barbican | 17:11 | |
| *** zz_dimtruck has joined #openstack-barbican | 17:12 | |
| *** zz_dimtruck is now known as dimtruck | 17:12 | |
| *** spotz has joined #openstack-barbican | 17:12 | |
| *** tdink has joined #openstack-barbican | 17:13 | |
| *** jaosorior has quit IRC | 17:13 | |
| *** diazjf has quit IRC | 17:15 | |
| *** hyakuhei has quit IRC | 17:16 | |
| *** hyakuhei has joined #openstack-barbican | 17:20 | |
| *** spotz is now known as spotz_zzz | 17:28 | |
| *** spotz_zzz is now known as spotz | 17:30 | |
| *** kfarr has quit IRC | 17:38 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/336167 | 18:07 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/castellan: Updated from global requirements https://review.openstack.org/327361 | 18:07 |
| *** permalac has quit IRC | 18:20 | |
| *** pcaruana has joined #openstack-barbican | 18:34 | |
| *** diazjf has joined #openstack-barbican | 18:39 | |
| *** mathiasb has joined #openstack-barbican | 18:45 | |
| *** gyee has quit IRC | 18:48 | |
| *** hdd has quit IRC | 18:57 | |
| *** hdd has joined #openstack-barbican | 19:03 | |
| *** fawadkhaliq has joined #openstack-barbican | 19:05 | |
| *** diazjf has quit IRC | 19:11 | |
| *** diazjf has joined #openstack-barbican | 19:24 | |
| *** diazjf has quit IRC | 19:33 | |
| *** gyee has joined #openstack-barbican | 19:34 | |
| *** diazjf has joined #openstack-barbican | 19:42 | |
| *** fawadkhaliq has quit IRC | 19:52 | |
| *** fawadkhaliq has joined #openstack-barbican | 19:53 | |
| *** fawadkhaliq has quit IRC | 19:57 | |
| *** Guest40341 is now known as redrobot | 20:00 | |
| *** hdd has quit IRC | 20:03 | |
| *** hdd has joined #openstack-barbican | 20:04 | |
| *** tkelsey has joined #openstack-barbican | 20:08 | |
| *** hdd has quit IRC | 20:11 | |
| *** tkelsey has quit IRC | 20:12 | |
| *** hdd has joined #openstack-barbican | 20:19 | |
| *** diazjf has quit IRC | 20:55 | |
| *** tkelsey has joined #openstack-barbican | 21:10 | |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican: Implement Date Filters for Secrets https://review.openstack.org/338405 | 21:10 |
| *** tkelsey has quit IRC | 21:14 | |
| *** diazjf has joined #openstack-barbican | 21:26 | |
| *** edtubill has quit IRC | 21:28 | |
| *** krot_vaca_jul19 is now known as krotscheck | 21:30 | |
| *** catintheroof has quit IRC | 21:30 | |
| *** randallburt1 has quit IRC | 21:33 | |
| *** hdd has quit IRC | 21:40 | |
| *** hdd has joined #openstack-barbican | 21:43 | |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican: Implement Date Filters for Secrets https://review.openstack.org/338405 | 21:47 |
| *** michauds has joined #openstack-barbican | 22:02 | |
| *** spotz is now known as spotz_zzz | 22:36 | |
| *** diazjf has quit IRC | 22:42 | |
| *** michauds has quit IRC | 22:55 | |
| *** pcaruana has quit IRC | 23:05 | |
| *** tkelsey has joined #openstack-barbican | 23:11 | |
| *** hdd has quit IRC | 23:13 | |
| *** tkelsey has quit IRC | 23:15 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!