Hello Asha, The /v1/secrets resource is used to upload, encrypt and store your secrets, and to decrypt and retrieve those secrets. Key encryption keys (KEKs) internal to Barbican are used to encrypt the secret.
The /v1/orders resource is used when you want Barbican to generate secrets for you. When they are done they give you references to where the secrets are stored so you can retrieve them via the secrets resource above. Hope that helps! Thanks, John From: Asha Seshagiri <[email protected]<mailto:[email protected]>> Date: Thursday, April 16, 2015 at 1:23 AM To: openstack-dev <[email protected]<mailto:[email protected]>> Cc: John Wood <[email protected]<mailto:[email protected]>>, "Reller, Nathan S." <[email protected]<mailto:[email protected]>>, Douglas Mendizabal <[email protected]<mailto:[email protected]>>, Paul Kehrer <[email protected]<mailto:[email protected]>>, Adam Harwell <[email protected]<mailto:[email protected]>>, Alexis Lee <[email protected]<mailto:[email protected]>> Subject: Barbican : What is the difference between secret and order resource Hi All , What is the difference between secret and the order resource ? Where is the key stored that is used for encrypting the payload in the secret resource and how do we access it. According to my understanding , Storing/Posting the secret means we are encrypting the actual information(payload) using the key generated internally by the barbican based on the type mentioned in the secret type. Geting the secret means we are decryprting the information and geting the actual information. Posting the order refers to the generation of the actual keys by the barbican and encyrpting those keys based on the algorithm and the internal key generated by barbican. This encrypted key is referred through the secret reference and the whole meta data is referred through a order reference. Please correct me if I am wrong. Any help would be highly appreciated. -- Thanks and Regards, Asha Seshagiri
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: [email protected]?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
