| *** dims has quit IRC | 04:47 | |
| *** dims has joined #openstack-barbican | 04:48 | |
| *** dims has quit IRC | 04:56 | |
| *** dims has joined #openstack-barbican | 04:56 | |
| *** Luzi has joined #openstack-barbican | 06:44 | |
| jaosorior | redrobot: thanks dude! | 07:05 |
|---|---|---|
| *** graeb has joined #openstack-barbican | 07:25 | |
| *** pcaruana has joined #openstack-barbican | 07:42 | |
| *** graeb has quit IRC | 07:53 | |
| *** graeb has joined #openstack-barbican | 07:53 | |
| *** graeb has quit IRC | 08:20 | |
| *** graeb has joined #openstack-barbican | 08:20 | |
| *** xek has joined #openstack-barbican | 08:24 | |
| *** moguimar has joined #openstack-barbican | 09:34 | |
| *** marios has joined #openstack-barbican | 10:39 | |
| marios | o/ folks review request please if you have time https://review.openstack.org/#/c/628244/ replace the multinode scenario job with the new standalone. More info at http://lists.openstack.org/pipermail/openstack-discuss/2019-January/001377.html thanks! | 10:40 |
| *** pbourke has quit IRC | 11:08 | |
| *** pbourke has joined #openstack-barbican | 11:10 | |
| *** sayalilunkad has quit IRC | 12:51 | |
| *** raildo has joined #openstack-barbican | 12:51 | |
| *** sayalilunkad has joined #openstack-barbican | 12:51 | |
| jaosorior | marios: thanks! | 12:58 |
| redrobot | #startmeeting barbican | 13:00 |
| openstack | Meeting started Tue Jan 8 13:00:55 2019 UTC and is due to finish in 60 minutes. The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot. | 13:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 13:00 |
| *** openstack changes topic to " (Meeting topic: barbican)" | 13:00 | |
| openstack | The meeting name has been set to 'barbican' | 13:01 |
| jaosorior | o/ | 13:01 |
| Luzi | o/ | 13:01 |
| graeb | o/ | 13:01 |
| redrobot | Courtesy ping for ade_lee hrybacki jamespage Luzi lxkong moguimar raildo rm_work xek | 13:01 |
| moguimar | o/ | 13:01 |
| redrobot | Oh wow! Lots of folks here today. 😄 | 13:02 |
| redrobot | As usual our agenda can be found here: | 13:02 |
| raildo | o/ | 13:02 |
| redrobot | #link https://etherpad.openstack.org/p/barbican-weekly-meeting | 13:02 |
| redrobot | and we actually have some topics on there today! 🎉 | 13:03 |
| redrobot | I hope everyone is having a great 2019 so far. | 13:03 |
| redrobot | Let's get started: | 13:03 |
| redrobot | #topic Action Items from last meeting: | 13:03 |
| *** openstack changes topic to "Action Items from last meeting: (Meeting topic: barbican)" | 13:03 | |
| redrobot | #link http://eavesdrop.openstack.org/meetings/barbican/2018/barbican.2018-12-18-13.00.html | 13:04 |
| redrobot | redrobot to update the Barbican Wiki page | 13:05 |
| redrobot | I did not do that (boo!) | 13:05 |
| redrobot | but I will get it done by next week. | 13:05 |
| redrobot | #action redrobot to update the Barbican Wiki page | 13:05 |
| redrobot | Next | 13:06 |
| redrobot | > everyone think of topics for summit presentations | 13:06 |
| redrobot | I hope y'all did. | 13:06 |
| redrobot | #topic Summit CFP | 13:06 |
| *** openstack changes topic to "Summit CFP (Meeting topic: barbican)" | 13:06 | |
| redrobot | Anyone think of Barbican or Barbican related presentations over the break? | 13:06 |
| redrobot | Bueller? | 13:08 |
| Luzi | will you or ade_lee give that workshop again? | 13:10 |
| redrobot | Ok, I'm guessing y'all are still waiting for the coffee to kick in like I am. ☕ | 13:10 |
| *** ade_lee has quit IRC | 13:10 | |
| redrobot | Luzi, great question. I heard there was a lot of interest last summit, but things didn't go so well. I think it would definitely be awesome to do it again sans hardware hiccups. | 13:11 |
| redrobot | #action redrobot to ask alee about submitting the Barbican workshop to the next Summit | 13:12 |
| redrobot | Anything else? | 13:12 |
| redrobot | I was thinking maybe alee and I could talk about the HSM support we've been working on ... | 13:12 |
| redrobot | I'll have to talk to him about it | 13:12 |
| Luzi | that's a good idea redrobot | 13:12 |
| redrobot | Does anyone know off the top of their head when the CFP deadline is? | 13:13 |
| * redrobot looks | 13:13 | |
| Luzi | 23rd i think | 13:13 |
| Luzi | let mee look again | 13:13 |
| Luzi | yep 23rd of anuary 11:59 pm PT | 13:14 |
| Luzi | January | 13:14 |
| redrobot | Thanks, Luzi | 13:14 |
| redrobot | So we've still got a couple of weeks to think about and submit proposals. | 13:15 |
| redrobot | Don't leave it to the last minute though! 😉 | 13:15 |
| redrobot | Ok, moving on ... | 13:15 |
| redrobot | #topic Multiple regressions since Barbican 7.0.0 | 13:16 |
| *** openstack changes topic to "Multiple regressions since Barbican 7.0.0 (Meeting topic: barbican)" | 13:16 | |
| redrobot | graeb, Luzi: your topic? | 13:17 |
| Luzi | yeah, graeb made some more tests with our Safenet Luna HSM and noticed a few things, we would like to ask now | 13:18 |
| graeb | Well. Barbican 7.0.0 and newer versions stoppt working with HSMs from SafeNet. | 13:18 |
| graeb | Commit dba5ead from Alee introduced that problem. :-/ | 13:18 |
| graeb | Got an error CKR_ATTRIBUTE_VALUE_INVALID when trying to store a secret. | 13:19 |
| Luzi | the same goes for utimaco soft hsm, but we heard some guys from utimaco are already working on it, right? | 13:19 |
| * redrobot looks for a link to the change | 13:19 | |
| redrobot | graeb, are you sure that's the correct change ID? I'm finding this: | 13:21 |
| redrobot | #link https://github.com/openstack/barbican/commit/dba5eade39a86b95a97369e7c0e5f79faf0ff385 | 13:21 |
| graeb | Sorry, wring commit. This is right: https://github.com/openstack/barbican/commit/df8c62aab357954000e8539ac17daea45f93ee7c | 13:22 |
| redrobot | There were not many attribute changes on that patch | 13:24 |
| redrobot | Do you know what function is throwing the error? e.g. unwrap, encrypt, decrypt, etc? | 13:25 |
| graeb | generate_key | 13:25 |
| graeb | in barbican/plugin/crypto/pkcs11.py | 13:26 |
| redrobot | During normal operation or MKEK/PKEK generation? | 13:27 |
| * redrobot thinks it's going to be hard to debug this blind | 13:27 | |
| graeb | Then a new PKEK is generated, the error is thrown | 13:28 |
| graeb | I not tried to generate a MKEK with Barbican 7.0.0 since it was already there. | 13:29 |
| redrobot | I see .. I'll have to dig into the code to figure out what's going on. | 13:30 |
| graeb | I couldn't find a difference in the way the PKEKs are generated in 7.0.0 and a working version of Barbican. | 13:30 |
| graeb | With commit dba5ead it is still working. | 13:31 |
| *** zigo has joined #openstack-barbican | 13:31 | |
| redrobot | Yeah, we tried to keep things the same when we introduced other mechanims. Unfortunately we don't have access to a Safenet HSM for testing :( | 13:31 |
| graeb | Shall I upload the StackTRace somethere? | 13:32 |
| redrobot | graeb, yeah that would help. And if you can get a PKCS#11 log from the HSM that might help debug too | 13:32 |
| graeb | somewhere | 13:32 |
| redrobot | paste.openstack.org? | 13:32 |
| redrobot | I can't recall what Safenet logs look like | 13:33 |
| redrobot | but the Thales HSMs we've been playing with have really good verbose logging options that would show what attributes are being sent on that generate_key call | 13:33 |
| graeb | http://paste.openstack.org/show/740498/ | 13:33 |
| redrobot | graeb, sweet. I'll take a look after the meeting. | 13:34 |
| graeb | I must confess that I never have seen SafeNet HSM logs. Maybe I can past some information from such a log too. | 13:34 |
| graeb | I juast pasted the TraceBack from Barbican. | 13:35 |
| redrobot | I'll see what I can figure out from the Barbican logs | 13:35 |
| graeb | Ok, thanks. So we can switch over to the next topic. | 13:36 |
| redrobot | graeb, Luzi there was another concern on the agenda? | 13:36 |
| redrobot | Yes, lets move on | 13:36 |
| graeb | PKEK are generated with attribute CKA_SENSITIVE set to true. That means, that PKEK are extractable from the HSM. This also was introduced with commit df8c62a. | 13:37 |
| graeb | Seems there is an compatibility issue with some HSMs, and so the workaround was to generate PKEKs like that. But this is less save. | 13:39 |
| Luzi | there was a comment, that this was necessary for som HSM, right? | 13:39 |
| graeb | Yes. | 13:39 |
| graeb | So we have a security versus compatibility problem maybe? | 13:40 |
| redrobot | Well, PKEKs do get extracted after being wrapped. | 13:40 |
| redrobot | Though I can't recall off the top of my head whether CKA_SENSITIVE would survive the wrap/unwrap process. | 13:41 |
| redrobot | Ah yes, CKA_SENSITIVE and CKA_EXTRACTABLE have to match | 13:42 |
| redrobot | CKA_EXTRACTABLE has to be true for PKEKs so that we can retrieve them for storage in the DB | 13:42 |
| redrobot | I wonder if that's the Attribute that's causing problems for the Safenet HSM? | 13:43 |
| redrobot | I also can't remember if it was the ATOS or the Thales HSM that complained about the CKA_SENSITIVE and CKA_EXTRACTABLE mismatch. 🤔 | 13:44 |
| graeb | Ok, I will check that. | 13:44 |
| graeb | With SafeNet HSM. | 13:44 |
| redrobot | graeb, yeah, if you can change that attribute back to always true and have it work then we'll definitely need to make it configurable. | 13:45 |
| redrobot | graeb, Luzi so I think we'll have to dig into this more after the meeting. Is there anything else y'all want to talk about while we're here? | 13:46 |
| graeb | To make that configurable is an brilliant idea I think. | 13:46 |
| Luzi | redrobot, that's everything from our side | 13:47 |
| redrobot | ok, thanks y'all | 13:47 |
| redrobot | moving on ... | 13:47 |
| redrobot | well, there's nothing else on there | 13:47 |
| redrobot | but while we're on the topic of HSMs | 13:47 |
| redrobot | #topic ATOS and Thales HSM integration | 13:47 |
| *** openstack changes topic to "ATOS and Thales HSM integration (Meeting topic: barbican)" | 13:48 | |
| redrobot | alee and I have been working on getting TripleO deployment support for Barbican with both ATOS and Thales HSMs | 13:48 |
| redrobot | There's still some stuff under review | 13:48 |
| redrobot | #link https://review.openstack.org/#/q/topic:add_hsm_parameters | 13:49 |
| redrobot | We had two patches for tripleo-common but we were asked to put them elsewhere since they're not strictly tripleo related | 13:49 |
| redrobot | The ansible roles are in my personal github for now: | 13:50 |
| redrobot | #link https://github.com/dmend/ansible-role-atos-hsm | 13:50 |
| redrobot | #link https://github.com/dmend/ansible-role-thales-hsm | 13:50 |
| redrobot | I'm going to be working with the openstack-ansible folks to hopefully add those repos to the openstack-ansible org | 13:51 |
| redrobot | I pitched the idea on their IRC channel the other day and they seemed receptive to the idea | 13:51 |
| redrobot | Next steps is to submit a patch to infra, I think | 13:52 |
| redrobot | so I'll post that to the channel once it happens | 13:52 |
| redrobot | any questions about the TripleO+HSM work? | 13:52 |
| redrobot | ok, moving on | 13:53 |
| redrobot | #topic Reviews | 13:53 |
| *** openstack changes topic to "Reviews (Meeting topic: barbican)" | 13:53 | |
| redrobot | #link https://tinyurl.com/yctfozgh | 13:54 |
| redrobot | There's a milestone coming up this week. | 13:54 |
| redrobot | are there any patches that need to be merged before then? | 13:54 |
| redrobot | I'm going to be looking at the Vault AppRole patch today | 13:54 |
| redrobot | for castellan | 13:54 |
| redrobot | and I think we've gotten all the high priority patches reviewed for barbican server | 13:55 |
| redrobot | we're going to have to punt on the OVO work | 13:55 |
| redrobot | No patches on y'alls end? | 13:57 |
| redrobot | alrighty then | 13:57 |
| redrobot | I think we're done for the day | 13:57 |
| redrobot | Thanks for coming everyone | 13:57 |
| redrobot | #endmeeting | 13:57 |
| *** openstack changes topic to "OpenStack PTG Denver - https://etherpad.openstack.org/p/barbican-stein-ptg" | 13:57 | |
| openstack | Meeting ended Tue Jan 8 13:57:39 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 13:57 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/barbican/2019/barbican.2019-01-08-13.00.html | 13:57 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/barbican/2019/barbican.2019-01-08-13.00.txt | 13:57 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/barbican/2019/barbican.2019-01-08-13.00.log.html | 13:57 |
| *** ssbarnea has joined #openstack-barbican | 14:22 | |
| ssbarnea | hi! is anyone working to fix this job http://zuul.openstack.org/builds?job_name=barbican-dogtag-devstack-functional-fedora-latest ? seems broken for almost a month | 14:23 |
| jaosorior | redrobot, have you or alee had a chance to look at it? ^^ | 14:36 |
| redrobot | jaosorior, ssbarnea I thought alee was going to look into it? | 14:36 |
| jaosorior | gotta poke him when he's online | 14:38 |
| *** Luzi has quit IRC | 14:45 | |
| openstackgerrit | Sorin Sbarnea proposed openstack/barbican master: Replace tripleo-scenario002-multinode with scenario002-standalone https://review.openstack.org/628244 | 14:47 |
| ssbarnea | redrobot: jaosorior tanks for the update. do you happen to know what is causing it? I seen lots of warnings about ansible.cfg not being loaded and wonder if the failure may relate to that. | 14:48 |
| redrobot | ssbarnea, I haven't looked into it at all. I'll ping alee about it when I see him online | 14:49 |
| ssbarnea | ok, don't forget to ping me when there are news, even if is not fixed yet. and thanks again! | 14:49 |
| *** ade_lee has joined #openstack-barbican | 15:31 | |
| redrobot | graeb, looking at the trace and diff, it seems that CKR_SENSITIVE is the only thing that changed. Have you had a chance to change that to True and see if that fixes your Safenet error? | 15:58 |
| graeb | I now followed your suggestion and set the attribute CKA_SENSITIVE to True again and now it works! I testes with Barbican 7.0.0 and the latest commit (296ef6b894). | 15:59 |
| graeb | tested | 15:59 |
| redrobot | graeb, awesome. I think we'll definitely need to add a config option to set that to always true for Safenet HSMs | 16:00 |
| graeb | That would be great! :-) | 16:00 |
| *** moguimar has quit IRC | 16:09 | |
| *** moguimar has joined #openstack-barbican | 16:11 | |
| redrobot | graeb, I added a story to our storyboard for that regression fix: https://storyboard.openstack.org/#!/story/2004734 | 16:13 |
| ade_lee | redrobot, lets throw up a patch for that today and I'll revfiew | 16:14 |
| redrobot | ade_lee, ack, I'll get a patch up today | 16:14 |
| *** moguimar has quit IRC | 16:16 | |
| redrobot | ade_lee, while you're here, ssbarnea was asking about the barbican-dogtag-devstack-functional-fedora-latest gate that is failing | 16:18 |
| redrobot | ade_lee, have you had a chance to look into it? | 16:18 |
| ade_lee | redrobot, I started looking | 16:18 |
| ade_lee | redrobot, not figured out yet -- on my list for today | 16:19 |
| *** pcaruana has quit IRC | 16:20 | |
| *** ade_lee is now known as ade_lee_lunch | 16:30 | |
| *** graeb has quit IRC | 16:38 | |
| *** ade_lee_lunch is now known as ade_lee | 17:57 | |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican master: Fix Safenet HSM regression in PKCS#11 https://review.openstack.org/629294 | 19:35 |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican master: Fix Safenet HSM regression in PKCS#11 https://review.openstack.org/629294 | 19:37 |
| redrobot | ade_lee, graeb ^^ | 19:37 |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican master: Fix Safenet HSM regression in PKCS#11 https://review.openstack.org/629294 | 19:40 |
| ade_lee | redrobot, interesting. so safenet folks will be broken unless they add that magic flag? | 19:55 |
| redrobot | ade_lee, yeah... the spec is not very clear on how CKA_SENSITIVE and CKA_EXTRACTABLE relate to each other. Apparently Safenet HSMs want CKA_SENSITIVE=CK_TRUE or they complain, and one of our HSMs (can't recall if ATOS or Thales) compalains if CKA_SENSITIVE=CK_TRUE | 19:57 |
| ade_lee | redrobot, given that we're fixing a regression - and that we're adding support for atos/thales - it seems more appropriate to have the new HSMs have to add a new parameter . | 19:58 |
| redrobot | ade_lee, so you'd rather it default to True? | 19:58 |
| ade_lee | redrobot, ie. default to always_set_secure to be True or something like that .. | 19:58 |
| redrobot | ade_lee, works for me, give me a sec and I'll change it. | 19:59 |
| redrobot | ade_lee, we'll also have to add it to THT | 19:59 |
| ade_lee | redrobot, we'll need to change dox and THT | 19:59 |
| ade_lee | yup -- I'm not sure I'm enamoured with the variable name .. | 19:59 |
| *** redrobot has left #openstack-barbican | 19:59 | |
| *** redrobot has joined #openstack-barbican | 20:00 | |
| ade_lee | redrobot, yup -- I'm not sure I'm enamoured with the variable name .. | 20:00 |
| redrobot | ade_lee, I'm open to suggestions | 20:00 |
| ade_lee | I get the idea, but it seems a little inartful .. | 20:00 |
| ade_lee | yeah -- trying to come up with something better | 20:01 |
| ade_lee | redrobot, maybe this is what was throwing me -- the var name is CKR_SENSITIVE and you have always_set_secure_parameter -- should it not be something like always_set_ckr_sensitive ? | 20:04 |
| redrobot | ade_lee, works for me | 20:05 |
| redrobot | CKA_SENSITIVE is a CK Attribute (hence CKA_) | 20:05 |
| redrobot | so yeah, set secure_attribute may have been a better choice | 20:06 |
| redrobot | but always_set_cka_secure works for me | 20:06 |
| * redrobot realizes its secure and not sensitive | 20:06 | |
| redrobot | I'll update the patch right now | 20:07 |
| ade_lee | redrobot, well what was throwing me me .. it should be secure or sensitive? | 20:07 |
| redrobot | ade_lee, oh derp | 20:08 |
| redrobot | ade_lee, maybe I need to go for a walk, it's CKA_SENSITIVE, lol | 20:08 |
| ade_lee | I suggest you use the same as the parameter name | 20:08 |
| ade_lee | always_set_ckr_sensitive | 20:08 |
| redrobot | ade_lee, agreed, should be "always_set_cka_sensitive" | 20:08 |
| redrobot | CKR is for errors, CKA is for attributes | 20:09 |
| ade_lee | redrobot, and default to True | 20:09 |
| ade_lee | redrobot, it may be worth adding a comment that for Safenet we want it to be True, while for Thales and ATOS, we want false | 20:10 |
| redrobot | ade_lee, I think we should add an HSM Support section to the docs, and specify there what the right options should be | 20:10 |
| ade_lee | redrobot, ok | 20:10 |
| redrobot | ade_lee, including what mechanisms are supported, et | 20:11 |
| redrobot | c | 20:11 |
| ade_lee | redrobot, yeah - we need that somewhere other than in my development guide :/ | 20:11 |
| * redrobot has been resisting opening the docs can of worms | 20:11 | |
| ade_lee | redrobot, lets add a story to do that or we'll forget | 20:11 |
| redrobot | ade_lee, docs need some serious tlc ... | 20:12 |
| ade_lee | redrobot, any idea how these files are zipped up -- http://logs.openstack.org/67/628667/2/check/barbican-dogtag-devstack-functional-fedora-latest/914ef00/logs/etc/barbican/alias/ | 20:13 |
| ade_lee | redrobot, trying to figure out whats up with the dogtag gate | 20:14 |
| ade_lee | redrobot, looks like the binary has been textified somehow | 20:15 |
| redrobot | ade_lee, no idea... used to be able to just click through on the browser. :-\ | 20:17 |
| ade_lee | redrobot, any idea how to get other logs to be saved by the gate? | 20:17 |
| ade_lee | redrobot, gotta look at the dogtag logs - but dont know how to get them .. | 20:18 |
| redrobot | ade_lee, I think there's some devstack ansible scripts that execute at the end of the run that package up the logs | 20:18 |
| redrobot | ade_lee, just realized those are *.db files. Maybe download untar and check with sqlite? | 20:26 |
| ade_lee | redrobot, yeah - I think those are actually ok .. | 20:26 |
| ade_lee | so it looks like the ansible scripts grab everything under a logs directory .. | 20:27 |
| ade_lee | https://github.com/openstack-dev/devstack/blob/master/roles/fetch-devstack-log-dir/tasks/main.yaml | 20:27 |
| ade_lee | redrobot, so what I need to do is get my logs copied to that directory | 20:27 |
| ade_lee | redrobot, some sort of post-test hook? | 20:27 |
| redrobot | ade_lee, ah, I understand what you're trying to do now. | 20:28 |
| redrobot | ade_lee, tbh, I don't remember how that stuff works exactly. :( | 20:28 |
| *** jmlowe has quit IRC | 20:30 | |
| ade_lee | redrobot, maybe you can something I can't .. | 20:31 |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican master: Fix Safenet HSM regression in PKCS#11 https://review.openstack.org/629294 | 20:31 |
| ade_lee | redrobot, http://logs.openstack.org/67/628667/2/check/barbican-dogtag-devstack-functional-fedora-latest/914ef00/logs/screen-barbican-svc.txt.gz | 20:31 |
| *** jmlowe has joined #openstack-barbican | 20:31 | |
| FrankZhang | hey guys, got a question, can barbican be served via SSL or it can only be behind load balancer? | 20:33 |
| redrobot | FrankZhang, barbican itself doesn't have a web server (it's a wsgi server). The recommended deployment would be: Real web server -> WSGI Server -> Barbican | 20:44 |
| redrobot | FrankZhang, so like ngnix -> gunicorn -> barbican | 20:44 |
| redrobot | FrankZhang, or apache -> paste -> barbican | 20:45 |
| redrobot | FrankZhang, tls would be handled by the web server (nginx or apache) | 20:45 |
| redrobot | FrankZhang, that's for a single instance, obviously a load balancer could also do TLS. Then you can either terminate there or reencrypt for the LB -> Web Server connection | 20:46 |
| redrobot | For super paranoid deployments it would be LB (with TLS) -> Nginx or apache (with TLS) -> WSGI thing -> barbican | 20:47 |
| FrankZhang | redrobot: I saw kmip ssl config here, is it served thru SSL? | 20:47 |
| FrankZhang | https://github.com/openstack/barbican/blob/0477799ea7421d884ab31d0f495ebccdc47fbce3/barbican/plugin/kmip_secret_store.py#L64 | 20:47 |
| redrobot | FrankZhang, no, that's for configuring a KMIP backend | 20:48 |
| redrobot | FrankZhang, so, say you have a KMIP backend, then the connection between barbican -> KMIP server could be encrypted | 20:48 |
| redrobot | FrankZhang, that's what the option is there for | 20:48 |
| redrobot | FrankZhang, the whole network would be: LB -> nginx -> gunicorn -> barbican -> KMIP | 20:49 |
| ade_lee | FrankZhang, in tripleo, we do --> haproxy -> apache -> paste -> barbican -> vault/kmip/dogtag iirc. | 20:51 |
| FrankZhang | Okay, thanks guys, that's much more clearer for now. | 21:00 |
| *** xek has quit IRC | 21:02 | |
| *** xek has joined #openstack-barbican | 21:02 | |
| *** raildo has quit IRC | 21:25 | |
| openstackgerrit | Ade Lee proposed openstack/barbican master: Work with 389-ds-base-1.4.0.20 https://review.openstack.org/628667 | 21:41 |
| *** ade_lee has quit IRC | 22:20 | |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican master: Fix Safenet HSM regression in PKCS#11 https://review.openstack.org/629294 | 22:34 |
| *** ade_lee has joined #openstack-barbican | 23:07 | |
| *** ade_lee has quit IRC | 23:13 | |
| *** ade_lee has joined #openstack-barbican | 23:13 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!