Monday, 2025-01-27

rajivhi15:03
rajivdo we have a meeting today ? 15:05
xekyep, sorry for being late15:08
xek#startmeeting barbican15:08
opendevmeetMeeting started Mon Jan 27 15:08:28 2025 UTC and is due to finish in 60 minutes.  The chair is xek. Information about MeetBot at http://wiki.debian.org/MeetBot.15:08
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:08
opendevmeetThe meeting name has been set to 'barbican'15:08
xek#topic Roll Call15:08
xekCourtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin jjung mharley lpiwowar15:08
xekAs usual our agenda can be found here:15:09
xek#link https://etherpad.openstack.org/p/barbican-weekly-meeting15:09
xek#topic Review Past Meeting Action Items15:09
xek#link https://meetings.opendev.org/meetings/barbican/2025/barbican.2025-01-20-15.01.html15:09
xekThere were no action items15:10
xek#topic Open Discussion15:13
xekrajivare you still here?15:13
rajivAfter continuous follows-up Thales confirmed and validated the support of their HSM on FIPS mode on 7.7.1 firmware version but their barbican.conf file is incorrect ? https://www.thalesdocs.com/gphsm/integrations/guides/openstack_barbican/index.html#configure-openstack-barbican-with-thales-luna-hsm-or-luna-cloud-hsm15:14
xekdmendiza^15:14
rajivi think https://docs.openstack.org/barbican/latest/configuration/plugin_backends.html should also be updated ?15:17
xekWhat do you mean by incorrect?15:17
xekDid you get an error15:17
rajivno, the Thales documentation mentions about openstack zed release and changes to barbican.conf15:19
rajivbut wondering which options under [p11_crypto_plugin] are mandatory ? 15:19
rajivalso encryption_mechanism = CKM_AES_CBC_GCM in openstack docu but in Thales its encryption_mechanism = CKM_AES_GCM15:20
xeklooks like doc/source/install/barbican-backend.rst mentions CKM_AES_CBC_GCM15:25
rajivyes15:25
xekand that's the only place it appears in, so looks like a typo15:25
rajivtypo in openstack or thales docu ?15:26
xekyeah, maybe15:26
xekif you get around to running it, we can fix the docs15:30
rajivi will check with Thales and raise a request accordingly, since both crypto algo exists15:30
xekok, thanks for doing this!15:32
xekmaybe actually both are correct...15:32
rajivah ok15:33
xekallright, let's go to the last topic15:36
xek#topic Bug Review15:36
xekThere were no new bugs reported15:37
xekHave a great weak and let's meet next Monday!15:37
xek#endmeeting15:37
opendevmeetMeeting ended Mon Jan 27 15:37:45 2025 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:37
opendevmeetMinutes:        https://meetings.opendev.org/meetings/barbican/2025/barbican.2025-01-27-15.08.html15:37
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/barbican/2025/barbican.2025-01-27-15.08.txt15:37
opendevmeetLog:            https://meetings.opendev.org/meetings/barbican/2025/barbican.2025-01-27-15.08.log.html15:37

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!