| rajiv | Hi, while i was re-testing barbican with Thales HSM on FIPs mode | 11:21 |
|---|---|---|
| rajiv | i get the below error : | 11:21 |
| rajiv | Could not find an enabled crypto plugin backend that supports the requested operation: retrieve a secret from plugin: barbican.plugin.crypto.simple_crypto.SimpleCryptoPlugin | 11:22 |
| rajiv | in the barbican.conf i did set enabled_crypto_plugins = p11_crypto | 11:22 |
| rajiv | my test worked in Openstack Wallaby but fails in Ussuri, were there any recent changes for these tests to fail ? | 11:22 |
| rajiv | also, should this table show hsm ? | 11:23 |
| rajiv | select * from secret_stores; | 11:23 |
| rajiv | v | 11:23 |
| rajiv | Empty set (0.000 sec) | 11:23 |
| dmendiza[m] | Hi rajiv ! | 12:48 |
| rajiv | Thales confirms Barbican-HSM integration works well on FIPS mode : | 12:51 |
| rajiv | https://cpl.thalesgroup.com/sites/default/files/content/integration_guides/field_document/2021-10/OpenStackBarbican_LunaHSM_IntegrationGuide_RevC.pdf | 12:51 |
| rajiv | https://cpl.thalesgroup.com/resources/encryption/openstack-barbican-integration-guide | 12:51 |
| rajiv | but while i am testing these scenarieos maybe due to multiple deployments, the barbican DB is messed up, could i know how to clear up old keys ? | 12:52 |
| dmendiza[m] | #barbican now PKCS12 type | 16:00 |
| dmendiza[m] | #barbican now Review Yoga PTG topics | 16:15 |
| dmendiza[m] | #barbican now UUIDs vs REFs | 16:26 |
| dmendiza[m] | #barbican Done for today, see y'all Friday | 16:46 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!