12:03:36 <redrobot> #startmeeting barbican
12:03:37 <openstack> Meeting started Tue Jul 24 12:03:36 2018 UTC and is due to finish in 60 minutes.  The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot.
12:03:38 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
12:03:41 <openstack> The meeting name has been set to 'barbican'
12:03:49 <redrobot> #topic Roll Call
12:03:51 <redrobot> o/
12:03:55 <namnh> o/
12:04:30 <redrobot> #link https://wiki.openstack.org/wiki/Meetings/Barbican
12:04:35 <redrobot> ^ Agenda for the day
12:04:42 <Luzi> o/
12:04:46 <redrobot> but it looks like nobody updated it...
12:05:00 <redrobot> so we'll just make it up as we go
12:06:23 <redrobot> #topic Rocky Milestone-3
12:06:42 <redrobot> This week is Rocky milestone 3 week
12:07:06 <redrobot> I know alee was mentioning we have a lot of reviews on deck
12:07:15 <redrobot> so I will review some stuff today
12:07:31 <redrobot> jaosorior is back from vacation so hopefully he'll have some time for reviews as well.
12:07:45 <redrobot> #link https://releases.openstack.org/rocky/schedule.html
12:08:11 <redrobot> Also going to look into the KMIP gate today
12:08:32 <redrobot> If worse comes to worst, then we'll try to make it a non-voting gate for now.
12:10:05 <redrobot> any questions about rocky-3 ?
12:10:11 <namnh> yeah, I am trying to understand the error
12:10:28 <namnh> but, I still don't understand the problem
12:10:29 <namnh> :)
12:11:08 <namnh> redrobot: do you have any idea to fix the gate?
12:11:39 <namnh> Some of my patch sets is being blocked by the gate
12:11:49 <namnh> s/is/are
12:11:52 <jaosorior> Sure, let me know if there are some urgent reviews and I'll check them out
12:12:22 <jaosorior> been a little swamped with bugs and reviews since I got back, but I'll make sure to give some time for any urgent ones here :)
12:12:57 <jaosorior> redrobot, namnh: The kmip gate seems to have issues with the initial certificate provisioning
12:13:09 <jaosorior> so it's not an actual barbican issue, but a setup issue
12:13:30 <redrobot> thanks jaosorior!
12:13:37 <namnh> yes, i think so
12:13:46 <jaosorior> still gotta figure out how that setup bit works
12:13:49 <redrobot> yeah, I have no idea how to fix the gate issue... but I haven't spent any time looking into it.
12:14:57 <redrobot> I may try to run the kmip gate locally in a VM to see if I can recreate that failure.
12:15:59 <namnh> redrobot: we just download the local.conf in the gate and run with devstack on local, is that right?
12:16:23 <redrobot> namnh, I _think_ so...
12:16:32 <redrobot> it's been a while since I've set up a devstack vm
12:16:54 <redrobot> so it should be a nice learning/refresher task for me :)
12:17:13 <jaosorior> redrobot: here's the issue http://logs.openstack.org/71/578071/3/check/barbican-kmip-devstack-functional/41e126e/logs/devstacklog.txt.gz#_2018-07-24_02_46_31_935
12:19:52 <redrobot> jaosorior, thanks
12:19:55 <redrobot> ok, moving on
12:20:05 <redrobot> #topic Key Length Validation
12:20:07 <redrobot> #link https://review.openstack.org/#/c/577096/
12:20:21 <redrobot> alee, is asking for feedback on that review
12:20:46 <redrobot> he is of the opinion that Barbican should/could generate keys of arbitrary length
12:20:52 <redrobot> *symmetric keys
12:21:20 <redrobot> I kinda think we should only support lengths that can be used with well defined algorithms.
12:21:28 <redrobot> your opinion is wanted :)
12:22:00 <redrobot> I think we definitely want to have a max length
12:24:14 <redrobot> #topic Any other topics?
12:24:15 <Luzi> I think it is necessary to define allowed lenghts
12:24:22 <Luzi> sorry, was late
12:24:35 <redrobot> Luzi, no worries.  Please feel free to add that to the review I linked.
12:24:47 <Luzi> I think it's also a security issue
12:25:16 <Luzi> if we allow any size, also very small lengths would be okay - and that could be used for brute force attacks
12:25:37 <Luzi> it just would make it easier to guess the right key
12:25:57 <Luzi> that's also why we wanted to increase the allowed bot length
12:26:00 <Luzi> bit
12:30:28 <redrobot> well, if we don't have any other topics to talk about we can call it a day...
12:30:42 <redrobot> thanks everyone for coming!  Please review things if you have time!
12:30:47 <redrobot> #endmeeting