| *** jmlowe has quit IRC | 00:00 | |
| openstackgerrit | yangyong proposed openstack/barbican-tempest-plugin master: fix urls in README https://review.opendev.org/678708 | 01:39 |
|---|---|---|
| *** dave-mccowan has quit IRC | 04:36 | |
| *** Luzi has joined #openstack-barbican | 05:43 | |
| *** trident has quit IRC | 07:00 | |
| *** trident has joined #openstack-barbican | 07:10 | |
| *** ivve has joined #openstack-barbican | 07:17 | |
| *** xek has joined #openstack-barbican | 07:30 | |
| *** jaosorior has quit IRC | 09:43 | |
| *** dpawlik has quit IRC | 10:04 | |
| *** dpawlik has joined #openstack-barbican | 11:18 | |
| *** jaosorior has joined #openstack-barbican | 11:20 | |
| *** dave-mccowan has joined #openstack-barbican | 11:35 | |
| *** ade_lee has quit IRC | 12:27 | |
| *** jaosorior has quit IRC | 12:39 | |
| *** jaosorior has joined #openstack-barbican | 12:39 | |
| redrobot | #startmeeting barbican | 13:00 |
| openstack | Meeting started Tue Aug 27 13:00:08 2019 UTC and is due to finish in 60 minutes. The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot. | 13:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 13:00 |
| *** openstack changes topic to " (Meeting topic: barbican)" | 13:00 | |
| openstack | The meeting name has been set to 'barbican' | 13:00 |
| moguimar | yololo | 13:00 |
| redrobot | #topic Roll Call | 13:00 |
| *** openstack changes topic to "Roll Call (Meeting topic: barbican)" | 13:00 | |
| redrobot | Courtesy ping for ade_lee hrybacki jamespage Luzi lxkong raildo rm_work xek | 13:00 |
| Luzi | o/ | 13:00 |
| redrobot | As usual our agenda can be found here: | 13:01 |
| redrobot | #link https://etherpad.openstack.org/p/barbican-weekly-meeting | 13:01 |
| redrobot | Luzi, moguimar, you guys are the best for always being here! :D | 13:01 |
| redrobot | #topic Review Past Meeting Action Items | 13:01 |
| *** openstack changes topic to "Review Past Meeting Action Items (Meeting topic: barbican)" | 13:01 | |
| redrobot | #link http://eavesdrop.openstack.org/meetings/barbican/2019/barbican.2019-08-20-13.00.html | 13:01 |
| moguimar | ¯\_(ツ)_/¯ | 13:02 |
| redrobot | I did not get a chance to do all the things I wanted to this week. :( | 13:02 |
| redrobot | So I'm kicking the can down the road | 13:02 |
| redrobot | redrobot to document the feature gap between python-barbicanclient and openstacksdk (4) | 13:02 |
| *** mhen has joined #openstack-barbican | 13:02 | |
| redrobot | #action redrobot to document the feature gap between python-barbicanclient and openstacksdk (4) | 13:02 |
| redrobot | #action redrobot to ask boss for some time to get a barbican-ui POC (1) | 13:02 |
| mhen | o/ | 13:02 |
| redrobot | #action redrobot to review octavia's how-to for uploading certs | 13:03 |
| redrobot | #undo | 13:03 |
| openstack | Removing item from minutes: #action redrobot to review octavia's how-to for uploading certs | 13:03 |
| redrobot | #action redrobot to review octavia's how-to for uploading certs (1) | 13:03 |
| redrobot | #action redrobot to check if secret types can be changed after upload (1) | 13:03 |
| redrobot | I use the parentheses to remind myself how many times we've bumped this. | 13:04 |
| redrobot | ok, moving on | 13:04 |
| redrobot | #topic Liaison Updates | 13:04 |
| *** openstack changes topic to "Liaison Updates (Meeting topic: barbican)" | 13:04 | |
| redrobot | moguimar, any updates from Oslo / Castellan ? | 13:04 |
| moguimar | none | 13:04 |
| *** jmlowe has joined #openstack-barbican | 13:04 | |
| redrobot | cool beans | 13:04 |
| redrobot | moving on | 13:04 |
| redrobot | I don't have anything on the agenda | 13:05 |
| redrobot | are there things y'all want to talk about? | 13:05 |
| Luzi | actually just something small | 13:06 |
| Luzi | we discovered simple_crypto is using fernet with aes128 for kek-crypto-operations, is that right? | 13:07 |
| mhen | #link https://github.com/openstack/barbican/blob/bf95c37b84688c99bda0849230508d955fc62f82/barbican/plugin/crypto/simple_crypto.py#L100 | 13:07 |
| redrobot | Hmmm... not sure I haven't looked at it in a while. | 13:08 |
| redrobot | oh, yep, that's fernet for sure. | 13:08 |
| redrobot | although the 128 is just metadata | 13:08 |
| redrobot | I don't think that's actually being used in the Fernet function | 13:08 |
| redrobot | #topic Open Discussion | 13:09 |
| *** openstack changes topic to "Open Discussion (Meeting topic: barbican)" | 13:09 | |
| *** jaosorior has quit IRC | 13:09 | |
| redrobot | obviously 'AES-CBC-128' != Fernet | 13:09 |
| mhen | #link https://cryptography.io/en/latest/fernet/#implementation | 13:10 |
| mhen | Barbican uses Fernet implementation from cryptography | 13:10 |
| mhen | and it seems to be limited to AES128 | 13:10 |
| mhen | the Fernet spec doesn't include 192 or 256 actually as it seems abandoned - there is a 2 years old pull request adding those modes | 13:12 |
| mhen | #link https://github.com/fernet/spec/pull/17 | 13:12 |
| redrobot | Well, that's a bummer | 13:14 |
| mhen | I found a quote in Keystone's presentation about their new JWS tokens: | 13:15 |
| mhen | "[Fernet] is not really being super supported / used that much anywhere but in Keystone and that was a warning sign [...]" | 13:15 |
| rm_work | o/ | 13:15 |
| mhen | #link https://youtu.be/zxsrkABzwOg?t=500 | 13:15 |
| rm_work | bit late but don't have anything to add really lol | 13:15 |
| * redrobot waves at rm_work | 13:16 | |
| mhen | I understand that simple_crypto is not supposed to be used for production environments | 13:16 |
| mhen | does this justify it being based on an old, abandoned crypto spec with no broad usage and open issues though ... | 13:18 |
| *** ade_lee has joined #openstack-barbican | 13:18 | |
| redrobot | mhen, you bring up a good point | 13:20 |
| redrobot | we can certainly improve the simple_cyrpto plugin | 13:20 |
| redrobot | the tricky part will be handling upgrades from an old simple_crypto to an enhanced one. | 13:20 |
| redrobot | mhen, do you want to file a bug against Barbican in storyboard | 13:21 |
| redrobot | ?\ | 13:21 |
| mhen | sure | 13:21 |
| redrobot | #action mhen to file a bug about simple_crypto using an outdated encryption mechanism (Fernet) | 13:22 |
| redrobot | cool beans | 13:23 |
| redrobot | any other topics we should talk about? | 13:23 |
| Luzi | not from my side | 13:24 |
| mhen | neither from mine :) | 13:24 |
| redrobot | alrighty, I think we're done for today then | 13:24 |
| moguimar | add comments to secret consumers review =D | 13:24 |
| moguimar | just that | 13:24 |
| redrobot | moguimar, you've got it! | 13:24 |
| redrobot | thanks for coming, everyone! | 13:25 |
| redrobot | #endmeeting | 13:25 |
| *** openstack changes topic to "OpenStack Barbican Train Cycle Development - Weekly Meeting Agenda: https://etherpad.openstack.org/p/barbican-weekly-meeting" | 13:25 | |
| openstack | Meeting ended Tue Aug 27 13:25:11 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 13:25 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/barbican/2019/barbican.2019-08-27-13.00.html | 13:25 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/barbican/2019/barbican.2019-08-27-13.00.txt | 13:25 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/barbican/2019/barbican.2019-08-27-13.00.log.html | 13:25 |
| *** jaosorior has joined #openstack-barbican | 13:33 | |
| *** Luzi has quit IRC | 14:02 | |
| *** dpawlik has quit IRC | 14:35 | |
| *** jmlowe has quit IRC | 15:13 | |
| *** jmlowe has joined #openstack-barbican | 15:13 | |
| *** dpawlik has joined #openstack-barbican | 15:29 | |
| *** dpawlik has quit IRC | 15:33 | |
| *** ivve has quit IRC | 16:22 | |
| *** arunkant_ has quit IRC | 16:59 | |
| *** jaosorior has quit IRC | 17:16 | |
| *** ivve has joined #openstack-barbican | 17:25 | |
| *** ivve has quit IRC | 17:26 | |
| *** ivve has joined #openstack-barbican | 17:27 | |
| *** dpawlik has joined #openstack-barbican | 17:29 | |
| *** dpawlik has quit IRC | 17:34 | |
| *** jaosorior has joined #openstack-barbican | 18:00 | |
| *** dpawlik has joined #openstack-barbican | 18:08 | |
| openstackgerrit | XueFeng Liu proposed openstack/python-barbicanclient master: Revise tox-lower-constraints bug https://review.opendev.org/678929 | 18:09 |
| *** dpawlik has quit IRC | 18:13 | |
| openstackgerrit | XueFeng Liu proposed openstack/python-barbicanclient master: Revise tox-lower-constraints bug https://review.opendev.org/678929 | 18:15 |
| *** arunkant has joined #openstack-barbican | 18:19 | |
| *** jmlowe has quit IRC | 18:39 | |
| *** jmlowe has joined #openstack-barbican | 19:56 | |
| *** ade_lee has quit IRC | 20:01 | |
| *** dpawlik has joined #openstack-barbican | 20:09 | |
| *** dpawlik has quit IRC | 20:13 | |
| *** xek has quit IRC | 20:34 | |
| *** ade_lee has joined #openstack-barbican | 20:44 | |
| *** ade_lee has quit IRC | 20:51 | |
| *** ade_lee has joined #openstack-barbican | 20:51 | |
| *** ivve has quit IRC | 21:25 | |
| *** trident has quit IRC | 22:05 | |
| *** dpawlik has joined #openstack-barbican | 22:10 | |
| *** trident has joined #openstack-barbican | 22:13 | |
| *** dpawlik has quit IRC | 22:15 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!