rajiv | hi | 15:03 |
---|---|---|
rajiv | do we have a meeting today ? | 15:05 |
xek | yep, sorry for being late | 15:08 |
xek | #startmeeting barbican | 15:08 |
opendevmeet | Meeting started Mon Jan 27 15:08:28 2025 UTC and is due to finish in 60 minutes. The chair is xek. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:08 |
opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:08 |
opendevmeet | The meeting name has been set to 'barbican' | 15:08 |
xek | #topic Roll Call | 15:08 |
xek | Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin jjung mharley lpiwowar | 15:08 |
xek | As usual our agenda can be found here: | 15:09 |
xek | #link https://etherpad.openstack.org/p/barbican-weekly-meeting | 15:09 |
xek | #topic Review Past Meeting Action Items | 15:09 |
xek | #link https://meetings.opendev.org/meetings/barbican/2025/barbican.2025-01-20-15.01.html | 15:09 |
xek | There were no action items | 15:10 |
xek | #topic Open Discussion | 15:13 |
xek | rajivare you still here? | 15:13 |
rajiv | After continuous follows-up Thales confirmed and validated the support of their HSM on FIPS mode on 7.7.1 firmware version but their barbican.conf file is incorrect ? https://www.thalesdocs.com/gphsm/integrations/guides/openstack_barbican/index.html#configure-openstack-barbican-with-thales-luna-hsm-or-luna-cloud-hsm | 15:14 |
xek | dmendiza^ | 15:14 |
rajiv | i think https://docs.openstack.org/barbican/latest/configuration/plugin_backends.html should also be updated ? | 15:17 |
xek | What do you mean by incorrect? | 15:17 |
xek | Did you get an error | 15:17 |
rajiv | no, the Thales documentation mentions about openstack zed release and changes to barbican.conf | 15:19 |
rajiv | but wondering which options under [p11_crypto_plugin] are mandatory ? | 15:19 |
rajiv | also encryption_mechanism = CKM_AES_CBC_GCM in openstack docu but in Thales its encryption_mechanism = CKM_AES_GCM | 15:20 |
xek | looks like doc/source/install/barbican-backend.rst mentions CKM_AES_CBC_GCM | 15:25 |
rajiv | yes | 15:25 |
xek | and that's the only place it appears in, so looks like a typo | 15:25 |
rajiv | typo in openstack or thales docu ? | 15:26 |
xek | yeah, maybe | 15:26 |
xek | if you get around to running it, we can fix the docs | 15:30 |
rajiv | i will check with Thales and raise a request accordingly, since both crypto algo exists | 15:30 |
xek | ok, thanks for doing this! | 15:32 |
xek | maybe actually both are correct... | 15:32 |
rajiv | ah ok | 15:33 |
xek | allright, let's go to the last topic | 15:36 |
xek | #topic Bug Review | 15:36 |
xek | There were no new bugs reported | 15:37 |
xek | Have a great weak and let's meet next Monday! | 15:37 |
xek | #endmeeting | 15:37 |
opendevmeet | Meeting ended Mon Jan 27 15:37:45 2025 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:37 |
opendevmeet | Minutes: https://meetings.opendev.org/meetings/barbican/2025/barbican.2025-01-27-15.08.html | 15:37 |
opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/barbican/2025/barbican.2025-01-27-15.08.txt | 15:37 |
opendevmeet | Log: https://meetings.opendev.org/meetings/barbican/2025/barbican.2025-01-27-15.08.log.html | 15:37 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!