| *** zz_dimtruck is now known as dimtruck | 00:20 | |
| *** nrado has quit IRC | 00:30 | |
| *** catintheroof has joined #openstack-barbican | 00:32 | |
| *** hoangcx has joined #openstack-barbican | 00:39 | |
| *** zhurong has joined #openstack-barbican | 00:53 | |
| *** agrebennikov has quit IRC | 01:15 | |
| *** nrado has joined #openstack-barbican | 01:19 | |
| *** dimtruck is now known as zz_dimtruck | 01:22 | |
| *** liujiong_lj has joined #openstack-barbican | 01:22 | |
| *** catintheroof has quit IRC | 01:24 | |
| *** catintheroof has joined #openstack-barbican | 01:30 | |
| *** catintheroof has quit IRC | 01:32 | |
| *** liujiong has quit IRC | 01:35 | |
| *** liujiong_lj is now known as liujiong | 01:35 | |
| *** namnh has joined #openstack-barbican | 01:53 | |
| *** nrado has quit IRC | 02:08 | |
| openstackgerrit | Jeremy Liu proposed openstack/barbican master: Use oslo.db create_engine instead of SQLAlchemy https://review.openstack.org/445722 | 02:27 |
|---|---|---|
| *** zz_dimtruck is now known as dimtruck | 02:37 | |
| openstackgerrit | Kiran Totad proposed openstack/barbican-tempest-plugin master: Add Constraints support Adding constraints support to libraries is slightly more complex than services as the libraries themselves are listed in upper-constraints.txt which leads to errors that you can't install a specific version and a constrained versio https://review.openstack.org/444575 | 03:58 |
| *** namnh has quit IRC | 04:05 | |
| openstackgerrit | Jeremy Liu proposed openstack/barbican master: Use oslo.db create_engine instead of SQLAlchemy https://review.openstack.org/445722 | 04:29 |
| *** zhurong has quit IRC | 05:00 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican master: Updated from global requirements https://review.openstack.org/445744 | 05:08 |
| *** namnh has joined #openstack-barbican | 06:48 | |
| *** jaosorior has joined #openstack-barbican | 06:52 | |
| *** totadkiran has joined #openstack-barbican | 06:56 | |
| *** zhurong has joined #openstack-barbican | 06:58 | |
| *** andreas_s has joined #openstack-barbican | 07:06 | |
| *** totadkiran has quit IRC | 07:51 | |
| *** pcaruana has joined #openstack-barbican | 08:05 | |
| *** totadkiran has joined #openstack-barbican | 08:13 | |
| *** zhurong has quit IRC | 08:28 | |
| *** nrado has joined #openstack-barbican | 08:59 | |
| *** dimtruck is now known as zz_dimtruck | 09:10 | |
| nrado | Hi everybody, next try :) Can someone tell me if this is the default kek (https://github.com/openstack/barbican/blob/30bbeae8eb2222952f5a48bd76bc96d24ab8dac1/barbican/plugin/crypto/simple_crypto.py#L35) when I do not set an own kek for Simple Crypto in barbican.conf? | 09:19 |
| *** liujiong_lj has joined #openstack-barbican | 09:27 | |
| *** liujiong has quit IRC | 09:27 | |
| *** zhurong has joined #openstack-barbican | 09:28 | |
| *** jaosorior is now known as jaosorior_lunch | 09:28 | |
| *** liujiong_lj is now known as liujiong | 09:36 | |
| liujiong | nrado: that's default kek for simple_crypto | 09:37 |
| *** zhurong has quit IRC | 09:38 | |
| *** zhurong has joined #openstack-barbican | 09:42 | |
| nrado | thx, liujiong! So i guess i have to overwrite it as soon as I use Barbican. Could you please answer me two more questions: | 09:50 |
| nrado | When I decide to use another plugin, let's say pkcs11, can I still use the simple_crypto_plugin? | 09:50 |
| nrado | Why is this plugin so unsecure compared to another plugins interacting with an HSM? I mean all Openstack passwords are stored somewhere in plain text in config files… | 09:50 |
| *** zhurong has quit IRC | 09:53 | |
| *** dmellado has quit IRC | 09:54 | |
| *** dmellado has joined #openstack-barbican | 10:02 | |
| liujiong | nrado: first one - no | 10:14 |
| liujiong | for the second question: | 10:16 |
| *** openstackgerrit has quit IRC | 10:18 | |
| liujiong | crypto plugin is used to encrypted/decreypted secrets stored in barbican, if you are using simple_crypto plugin, actually you are storing an encrypted secrets into database with the KEK defined in barbican.conf | 10:18 |
| liujiong | That's why we claim the simple_crypto plugin is not for production use. | 10:19 |
| *** liujiong has quit IRC | 10:23 | |
| *** namnh has quit IRC | 10:41 | |
| *** hoangcx has quit IRC | 10:46 | |
| nrado | ok, thank you very much for the answers! | 11:15 |
| *** liujiong has joined #openstack-barbican | 11:27 | |
| *** totadkiran has quit IRC | 12:05 | |
| *** jaosorior_lunch is now known as jaosorior | 12:21 | |
| *** openstackgerrit has joined #openstack-barbican | 12:40 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican master: Updated from global requirements https://review.openstack.org/445744 | 12:40 |
| *** jaosorior has quit IRC | 12:46 | |
| *** jaosorior has joined #openstack-barbican | 12:47 | |
| *** catintheroof has joined #openstack-barbican | 12:59 | |
| *** jmckind has joined #openstack-barbican | 13:55 | |
| *** tdink has joined #openstack-barbican | 13:59 | |
| *** zz_dimtruck is now known as dimtruck | 14:01 | |
| *** zhurong_ has joined #openstack-barbican | 14:03 | |
| *** zhurong_ has quit IRC | 14:06 | |
| *** tdink has quit IRC | 14:17 | |
| *** agrebennikov has joined #openstack-barbican | 14:20 | |
| *** chris_hultin|AWA is now known as chris_hultin | 14:22 | |
| *** liujiong has quit IRC | 14:28 | |
| *** chris_hultin is now known as chris_hultin|AWA | 14:32 | |
| *** dave-mccowan has joined #openstack-barbican | 14:38 | |
| *** tdink has joined #openstack-barbican | 15:08 | |
| *** diltram_ is now known as diltram | 15:21 | |
| *** tpatzig_ has joined #openstack-barbican | 15:26 | |
| *** seife_ has joined #openstack-barbican | 15:26 | |
| *** dgonzalez_ has joined #openstack-barbican | 15:26 | |
| *** david_1 has joined #openstack-barbican | 15:26 | |
| *** tpatzig_ has quit IRC | 15:27 | |
| *** dgonzalez_ has quit IRC | 15:27 | |
| *** seife_ has quit IRC | 15:27 | |
| *** david_1 has quit IRC | 15:28 | |
| *** nrado has left #openstack-barbican | 15:41 | |
| *** jaosorior has quit IRC | 16:02 | |
| *** andreas_s has quit IRC | 16:20 | |
| *** strigazi is now known as strigazi_AFK | 16:39 | |
| *** pcaruana has quit IRC | 17:28 | |
| *** catinthe_ has joined #openstack-barbican | 18:48 | |
| *** catintheroof has quit IRC | 18:51 | |
| *** edtubill has joined #openstack-barbican | 19:34 | |
| *** mmotiani has quit IRC | 19:45 | |
| openstackgerrit | Kaitlin Farr proposed openstack/barbican master: Add date filter functional tests https://review.openstack.org/436244 | 19:52 |
| openstackgerrit | Kaitlin Farr proposed openstack/barbican master: Fix KMIP gate https://review.openstack.org/437747 | 20:01 |
| openstackgerrit | Kaitlin Farr proposed openstack/python-barbicanclient master: Clean up all secrets in functional tests https://review.openstack.org/438098 | 20:08 |
| openstackgerrit | Brianna Poulos proposed openstack/barbican-tempest-plugin master: Switch to local copy of scenario test base class https://review.openstack.org/446163 | 20:28 |
| *** dave-mccowan has quit IRC | 20:29 | |
| *** dimtruck is now known as zz_dimtruck | 20:55 | |
| *** zz_dimtruck is now known as dimtruck | 21:08 | |
| *** dave-mccowan has joined #openstack-barbican | 21:14 | |
| *** dave-mcc_ has joined #openstack-barbican | 21:17 | |
| *** dave-mccowan has quit IRC | 21:19 | |
| openstackgerrit | Brianna Poulos proposed openstack/barbican-tempest-plugin master: Switch to local copy of scenario test base class https://review.openstack.org/446163 | 21:26 |
| openstackgerrit | Kaitlin Farr proposed openstack/barbican master: Fix KMIP gate https://review.openstack.org/437747 | 21:43 |
| *** edtubill has quit IRC | 21:52 | |
| *** jmckind has quit IRC | 21:54 | |
| *** jamielennox has quit IRC | 21:55 | |
| *** dimtruck is now known as zz_dimtruck | 22:09 | |
| *** edtubill has joined #openstack-barbican | 22:09 | |
| *** jamielennox has joined #openstack-barbican | 22:15 | |
| *** namnh has joined #openstack-barbican | 22:38 | |
| namnh | redrobot: mr. Mendizábal, could you please help me to review this patch set: https://review.openstack.org/#/c/442267/ | 22:40 |
| *** zz_dimtruck is now known as dimtruck | 22:41 | |
| openstackgerrit | Merged openstack/barbican master: Move dogtag plugin config options to extra file https://review.openstack.org/437981 | 22:49 |
| *** namnh has quit IRC | 22:51 | |
| *** catinthe_ has quit IRC | 23:02 | |
| *** tdink_ has joined #openstack-barbican | 23:03 | |
| *** tdink has quit IRC | 23:07 | |
| *** tdink_ has quit IRC | 23:08 | |
| *** dimtruck is now known as zz_dimtruck | 23:26 | |
| *** zz_dimtruck is now known as dimtruck | 23:26 | |
| *** dimtruck is now known as zz_dimtruck | 23:36 | |
| *** diltram has quit IRC | 23:39 | |
| *** agrebennikov has quit IRC | 23:41 | |
| *** mmotiani has joined #openstack-barbican | 23:49 | |
| *** zz_dimtruck is now known as dimtruck | 23:55 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!