*** bpokorny has joined #openstack-security | 00:19 | |
*** bpokorny_ has quit IRC | 00:22 | |
*** jimhoagland has quit IRC | 00:25 | |
*** sicarie has left #openstack-security | 00:31 | |
openstackgerrit | Darren Chan proposed openstack/security-doc: Updated sVirt diagram in the Security Guide https://review.openstack.org/134114 | 00:34 |
---|---|---|
*** ved_lad has joined #openstack-security | 00:36 | |
*** shohel02 has joined #openstack-security | 00:50 | |
*** jimhoagland has joined #openstack-security | 00:51 | |
*** shohel02 has quit IRC | 00:55 | |
*** tmcpeak has quit IRC | 00:59 | |
*** jimhoagland has quit IRC | 01:09 | |
*** shohel02 has joined #openstack-security | 01:50 | |
*** bpokorny has quit IRC | 01:54 | |
*** shohel02 has quit IRC | 01:55 | |
*** ved_lad has quit IRC | 01:58 | |
*** tmcpeak has joined #openstack-security | 02:16 | |
*** tmcpeak has quit IRC | 02:19 | |
*** shohel02 has joined #openstack-security | 02:50 | |
*** shohel02 has quit IRC | 02:54 | |
*** dave-mccowan has quit IRC | 03:18 | |
*** shohel02 has joined #openstack-security | 03:50 | |
*** shohel02 has quit IRC | 03:54 | |
*** shohel02 has joined #openstack-security | 04:50 | |
openstackgerrit | Tom Fifield proposed openstack/security-doc: Fix recommendations post-POODLE https://review.openstack.org/135844 | 04:53 |
*** shohel02 has quit IRC | 04:55 | |
openstackgerrit | Tom Fifield proposed openstack/security-doc: Fix recommendations post-POODLE https://review.openstack.org/135844 | 05:19 |
LinStatSDR | Thank you openstackgerrit | 05:33 |
*** g5 has joined #openstack-security | 05:35 | |
g5 | hi | 05:36 |
*** g5 has quit IRC | 05:37 | |
*** shohel02 has joined #openstack-security | 05:50 | |
*** shohel02 has quit IRC | 05:55 | |
*** LinStatSDR has quit IRC | 06:15 | |
*** jimhoagland has joined #openstack-security | 06:42 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/security-doc: Updated from openstack-manuals https://review.openstack.org/135546 | 06:44 |
*** shohel02 has joined #openstack-security | 06:50 | |
*** shohel02 has quit IRC | 06:55 | |
*** shohel02 has joined #openstack-security | 07:44 | |
*** salv-orlando_ has joined #openstack-security | 10:18 | |
*** salv-orlando has quit IRC | 10:19 | |
*** salv-orlando_ is now known as salv-orlando | 10:19 | |
openstackgerrit | Merged openstack/security-doc: Updated from openstack-manuals https://review.openstack.org/135546 | 11:49 |
openstackgerrit | Merged openstack/security-doc: Updated sVirt diagram in the Security Guide https://review.openstack.org/134114 | 11:55 |
*** dave-mccowan has joined #openstack-security | 12:44 | |
*** dave-mccowan_ has joined #openstack-security | 13:02 | |
*** dave-mccowan has quit IRC | 13:04 | |
*** dave-mccowan_ is now known as dave-mccowan | 13:04 | |
*** salv-orlando has quit IRC | 13:47 | |
*** amrith is now known as _amrith_ | 14:00 | |
*** elo has quit IRC | 14:01 | |
*** paulmo has joined #openstack-security | 14:14 | |
*** jimhoagland has quit IRC | 14:17 | |
*** paulmo1 has joined #openstack-security | 14:20 | |
*** nkinder has quit IRC | 14:21 | |
*** paulmo has quit IRC | 14:22 | |
*** paulmo has joined #openstack-security | 14:25 | |
*** paulmo1 has quit IRC | 14:26 | |
*** _amrith_ is now known as amrith | 14:51 | |
*** salv-orlando has joined #openstack-security | 14:57 | |
*** nkinder has joined #openstack-security | 15:10 | |
*** voodookid has joined #openstack-security | 15:19 | |
*** sicarie has joined #openstack-security | 16:04 | |
*** amrith is now known as _amrith_ | 16:07 | |
*** _amrith_ is now known as amrith | 16:21 | |
*** bpokorny has joined #openstack-security | 16:24 | |
*** tmcpeak has joined #openstack-security | 16:34 | |
openstackgerrit | Nathaniel Dillon proposed openstack/security-doc: Adding paragraph on updates to security instances section https://review.openstack.org/135051 | 16:43 |
*** shohel02 has quit IRC | 16:54 | |
*** amrith is now known as _amrith_ | 16:54 | |
*** bdpayne has joined #openstack-security | 17:00 | |
*** LinStatSDR has joined #openstack-security | 17:12 | |
openstackgerrit | Nathaniel Dillon proposed openstack/security-doc: Adding paragraph on updates to security instances section https://review.openstack.org/135051 | 17:16 |
openstackgerrit | Ramaraja proposed openstack/security-doc: Bugid: 1368406 : Link has been provided for 'Attack type'. closes-bug:#1368406 https://review.openstack.org/124824 | 17:22 |
*** Viswanath has joined #openstack-security | 17:24 | |
*** shohel02 has joined #openstack-security | 17:25 | |
*** LinStatSDR has quit IRC | 17:26 | |
*** LinStatSDR has joined #openstack-security | 17:26 | |
*** Viswanath has quit IRC | 17:27 | |
*** shohel02 has quit IRC | 17:29 | |
*** hyakuhei has joined #openstack-security | 17:59 | |
*** dg__ has joined #openstack-security | 18:00 | |
*** tkelsey has joined #openstack-security | 18:01 | |
tkelsey | o/ | 18:01 |
*** mvangund has joined #openstack-security | 18:01 | |
hyakuhei | o/ | 18:01 |
tmcpeak | \o | 18:01 |
hyakuhei | Seems people still want to talk SSL | 18:01 |
nkinder | pesky time change... :) | 18:01 |
hyakuhei | lol, oh hai nkinder | 18:01 |
hyakuhei | nice to see you | 18:02 |
tkelsey | heh yeah, outlook exploded and i missed last weeks OSSG :( | 18:02 |
nkinder | What'd I miss in the meeting? | 18:02 |
tmcpeak | nkinder: synching up about mid-cycle | 18:03 |
tkelsey | ok folks, I have to dash, good meeting though. | 18:03 |
nkinder | tkelsey: later | 18:03 |
tmcpeak | looks like we're going to try for SF in late Feb | 18:03 |
tmcpeak | with back to back OSSG/Barbican | 18:03 |
nkinder | Ok, still SF. Cool. | 18:03 |
nkinder | So Barbican is in SF still? (Keystone switched to San Antonio) | 18:04 |
tmcpeak | they're going to try to synch with us | 18:04 |
tmcpeak | we'll see how they vote, but most of OSSG voted for SF | 18:04 |
nkinder | Sounds good. That would be nice | 18:04 |
nkinder | I like late Feb too since I'm traveling already in the beginning of Feb | 18:04 |
tmcpeak | yeah late Feb is good | 18:05 |
nkinder | So what's up around SSL that hyakuhei mentioned above? | 18:06 |
tmcpeak | sicarie is going on a witch hunt | 18:06 |
*** tkelsey has quit IRC | 18:07 | |
tmcpeak | he volunteered to make a list of projects which support better SSL and aren't using it (I think) | 18:07 |
nkinder | tmcpeak: you mean the versions? | 18:07 |
tmcpeak | nkinder: yep | 18:08 |
nkinder | we're *really* close to being able to run tempest with TLS enabled for everything with a full pass rate | 18:09 |
*** anyibethRRR has joined #openstack-security | 18:09 | |
nkinder | there are some issues around boto IIRC, but it's a very small number of tests that fail now (15/2000+ I think) | 18:09 |
tmcpeak | nkinder: that would be cool | 18:10 |
nkinder | The gate tests are only a subset of that, so I think the ability to test with TLS enabled in the gate is just about there | 18:10 |
anyibethRRR | Hola | 18:10 |
tmcpeak | we have some Bandit test which will search for support for bad versions of SSL | 18:11 |
tmcpeak | we were going to run that too | 18:11 |
*** ChanServ sets mode: +o bdpayne | 18:12 | |
*** ChanServ sets mode: +o bdpayne | 18:14 | |
anyibethRRR | Hola,no hablan espaƱo | 18:14 |
*** anyibethRRR has left #openstack-security | 18:15 | |
bdpayne | that was fun, you guys can buy me a beer later ;-) | 18:16 |
*** shohel02 has joined #openstack-security | 18:20 | |
sicarie | nkinder I was poking around Neutron a few days ago and didn't see anything in lp around SSL and was wondering how that would be approached by the community as a whole | 18:24 |
*** shohel02 has quit IRC | 18:25 | |
nkinder | sicarie: you mean configuring Neutron to use TLS for it's API, or something else? | 18:26 |
sicarie | I was just noticing there was still widespread use of SSL | 18:26 |
sicarie | I was wondering what the approach was, if we were going to keep it as default or move to TLS as default, but allow downgrading to SSL, etc... | 18:27 |
sicarie | And how that would be implemented across projects | 18:27 |
sicarie | nkinder: ps I sent a redhat ceph programmer your way | 18:28 |
sicarie | He did an interesting presentation around pentesting neutron (hence my digging into Neutron afterwards) - https://www.usenix.org/conference/lisa14/conference-program/presentation/lambright | 18:30 |
*** bpokorny_ has joined #openstack-security | 18:31 | |
nkinder | sicarie: I honestly feel that all projects should just run via mod_wsgi and then we just use mod_ssl for the server side of TLS... | 18:32 |
nkinder | sicarie: but that's just me... | 18:32 |
sicarie | Yeah, and I know tkelsey did a bandit test for bad versions of ssl, but I was curious if anything was hardcoded, etc... | 18:33 |
*** bpokorny has quit IRC | 18:33 | |
dg__ | probably | 18:34 |
*** _amrith_ is now known as amrith | 18:39 | |
*** bdpayne has quit IRC | 18:44 | |
*** Viswanath has joined #openstack-security | 19:00 | |
*** ved_lad has joined #openstack-security | 19:01 | |
*** bpokorny has joined #openstack-security | 19:01 | |
*** bdpayne has joined #openstack-security | 19:02 | |
*** dg__ has quit IRC | 19:02 | |
*** bpokorny_ has quit IRC | 19:04 | |
*** Viswanath has quit IRC | 19:07 | |
*** salv-orlando has quit IRC | 19:12 | |
*** shohel02 has joined #openstack-security | 19:20 | |
*** dave-mccowan_ has joined #openstack-security | 19:23 | |
*** shohel02 has quit IRC | 19:25 | |
*** dave-mccowan has quit IRC | 19:26 | |
*** dave-mccowan_ is now known as dave-mccowan | 19:26 | |
*** bpokorny_ has joined #openstack-security | 19:27 | |
*** bpokorny has quit IRC | 19:30 | |
*** ved_lad has quit IRC | 19:47 | |
openstackgerrit | Nathaniel Dillon proposed openstack/security-doc: Adding paragraph on updates to security instances section https://review.openstack.org/135051 | 19:49 |
*** shohel02 has joined #openstack-security | 19:54 | |
*** shohel02 has quit IRC | 19:59 | |
*** nkinder has quit IRC | 20:02 | |
*** bpokorny has joined #openstack-security | 20:05 | |
*** bpokorny_ has quit IRC | 20:08 | |
*** shohel02 has joined #openstack-security | 20:21 | |
*** dave-mccowan_ has joined #openstack-security | 20:39 | |
*** dave-mccowan has quit IRC | 20:41 | |
*** dave-mccowan_ is now known as dave-mccowan | 20:41 | |
*** MasterPiece has joined #openstack-security | 20:43 | |
*** salv-orlando has joined #openstack-security | 20:44 | |
*** MasterPiece has quit IRC | 20:49 | |
*** MasterPiece has joined #openstack-security | 20:50 | |
*** edmondsw has joined #openstack-security | 21:06 | |
*** bpokorny_ has joined #openstack-security | 21:14 | |
*** bpokorny has quit IRC | 21:16 | |
*** nkinder has joined #openstack-security | 21:46 | |
*** bpokorny has joined #openstack-security | 21:47 | |
*** bpokorny_ has quit IRC | 21:50 | |
*** amrith is now known as _amrith_ | 21:50 | |
*** paulmo has quit IRC | 21:51 | |
*** edmondsw has quit IRC | 21:54 | |
*** shohel02 has quit IRC | 22:29 | |
*** MasterPiece has quit IRC | 22:37 | |
*** mvangund has quit IRC | 22:45 | |
*** shohel02 has joined #openstack-security | 23:02 | |
*** shohel02 has quit IRC | 23:07 | |
*** Harry51S has joined #openstack-security | 23:34 | |
*** bpokorny_ has joined #openstack-security | 23:35 | |
*** bpokorny has quit IRC | 23:39 | |
*** bpokorny has joined #openstack-security | 23:47 | |
*** bpokorny_ has quit IRC | 23:50 | |
*** shohel02 has joined #openstack-security | 23:50 | |
*** shohel02 has quit IRC | 23:54 | |
*** voodookid has quit IRC | 23:58 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!