*** alee has quit IRC | 00:14 | |
*** alee has joined #openstack-barbican | 00:16 | |
*** DongHM has joined #openstack-barbican | 01:24 | |
*** mhen has quit IRC | 01:53 | |
*** mhen has joined #openstack-barbican | 01:54 | |
*** antosh has joined #openstack-barbican | 02:03 | |
*** antosh has quit IRC | 02:26 | |
*** jmlowe has quit IRC | 02:35 | |
*** antosh has joined #openstack-barbican | 02:42 | |
*** FrankZhang has quit IRC | 03:13 | |
*** antosh has quit IRC | 04:22 | |
*** agrebennikov has joined #openstack-barbican | 04:26 | |
*** strigazi_ has joined #openstack-barbican | 05:29 | |
*** strigazi has quit IRC | 05:32 | |
*** strigazi has joined #openstack-barbican | 05:34 | |
*** strigazi_ has quit IRC | 05:36 | |
*** alee has quit IRC | 06:20 | |
*** velizarx has joined #openstack-barbican | 06:56 | |
openstackgerrit | Tuan Do Anh proposed openstack/barbican master: Update pypi url to new url https://review.openstack.org/581969 | 07:00 |
---|---|---|
*** alee has joined #openstack-barbican | 07:11 | |
*** velizarx has quit IRC | 07:13 | |
*** velizarx has joined #openstack-barbican | 07:22 | |
*** peereb has joined #openstack-barbican | 07:25 | |
*** serlex has joined #openstack-barbican | 07:47 | |
*** alee has quit IRC | 09:00 | |
openstackgerrit | Vu Cong Tuan proposed openstack/barbican master: Switch to stestr https://review.openstack.org/581619 | 09:00 |
*** agrebennikov has quit IRC | 09:01 | |
*** alee has joined #openstack-barbican | 09:14 | |
*** pbourke has quit IRC | 09:24 | |
*** pbourke has joined #openstack-barbican | 09:26 | |
*** alee has quit IRC | 10:20 | |
*** DongHM has quit IRC | 10:46 | |
*** velizarx has quit IRC | 10:53 | |
*** alee has joined #openstack-barbican | 10:57 | |
*** velizarx has joined #openstack-barbican | 11:09 | |
alee | redrobot, lxkong hello! | 11:38 |
lxkong | alee: hi | 11:38 |
alee | lxkong, I just gave a quick response , but basically the parameter you are passing into the padding mechanism is probably incorrect | 11:39 |
alee | you'd have to look to see what is required for the padding | 11:39 |
alee | lxkong, I can try to look tomorrow - have a few meetings today | 11:40 |
*** asbishop has joined #openstack-barbican | 11:48 | |
lxkong | alee: thanks for helping. We started to look at the vault plugin today as our backup solution, or use Vault directly as our secret management service rather than Barbican. | 11:53 |
lxkong | alee: but it'd be great if we could make PKCS#11 plugin works for our requiement | 11:55 |
alee | lxkong, sure. I'm actually looking at the pkcs11 plugin right now to do some hsm integrations, so this is timely | 11:58 |
alee | lxkong, and whether you can just use vault instead of barbican depends on the use case really | 11:59 |
alee | lxkong, afaik vault does not understand keystone tokens | 11:59 |
lxkong | yeah, I took a look at the commit history of both pkcs11.py and p11_crypto.py, both were not active sine 2016, not sure if there are other problems need to fix | 12:01 |
lxkong | you are right about the authn, but vault supports plugin machenism | 12:01 |
lxkong | we need to write a siimple plugin for openstack just as how vault-plugin-auth-gcp and vault-plugin-auth-azure do | 12:02 |
lxkong | but anyway, it's just backup solution | 12:02 |
lxkong | if we can't make the pkcs plugin work in the end | 12:03 |
*** raildo has joined #openstack-barbican | 12:04 | |
*** velizarx has quit IRC | 13:12 | |
*** velizarx has joined #openstack-barbican | 13:16 | |
*** rmascena has joined #openstack-barbican | 13:41 | |
*** raildo has quit IRC | 13:44 | |
*** velizarx has quit IRC | 14:14 | |
*** tidwellr has joined #openstack-barbican | 14:17 | |
*** FrankZhang has joined #openstack-barbican | 14:18 | |
*** antosh has joined #openstack-barbican | 14:30 | |
*** pkaralis has joined #openstack-barbican | 14:30 | |
*** pkaralis has quit IRC | 14:35 | |
*** pkaralis has joined #openstack-barbican | 14:39 | |
*** rmascena is now known as raildo | 14:47 | |
*** jmlowe has joined #openstack-barbican | 15:02 | |
*** peereb has quit IRC | 15:45 | |
*** jmlowe has quit IRC | 15:47 | |
*** agrebennikov has joined #openstack-barbican | 15:48 | |
*** alee has quit IRC | 16:10 | |
*** serlex has quit IRC | 17:21 | |
openstackgerrit | Harry Rybacki proposed openstack/barbican master: Ensure orders policy-in-code matches controller https://review.openstack.org/575782 | 17:36 |
openstackgerrit | Harry Rybacki proposed openstack/barbican master: Port RuleDefaults to DocumentedRuleDefaults https://review.openstack.org/575218 | 17:40 |
openstackgerrit | Harry Rybacki proposed openstack/barbican master: Port RuleDefaults to DocumentedRuleDefaults https://review.openstack.org/575218 | 17:43 |
*** jmlowe has joined #openstack-barbican | 18:24 | |
*** asbishop has quit IRC | 19:03 | |
*** agrebennikov_ has joined #openstack-barbican | 19:54 | |
*** alee has joined #openstack-barbican | 20:39 | |
*** FrankZhang has quit IRC | 21:04 | |
*** raildo has quit IRC | 21:10 | |
*** antosh has quit IRC | 21:26 | |
*** tidwellr has quit IRC | 21:31 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!