Re: charmhelpers migration to github

2017-09-19 Thread Bryan Quigley
>From other projects I've seen moved, I'd much prefer if the Code section (and any other sections not planned on being using anymore) were cleared out on LP and then disabled. Thanks! Bryan On Tue, Sep 19, 2017 at 9:42 AM, Marco Ceppi wrote: > I've updated the

Should Charms disable SSLv3 and RC4?

2016-03-28 Thread Bryan Quigley
Hi all, Right now if you deploy juju-gui or openstack-dashboard (and likely many more) they will follow the 14.04 default and have SSLv3 and RC4 enabled. In both cases this can make the communication insecure. 1) Should we default SSLv3/RC4 to disabled in charms that we know we can? For

Re: Does sftp eliminate the need to check sha1sum?

2016-01-13 Thread Bryan Quigley
That seems equivalent to downloading from an HTTPS site which I don't think would qualify as verifying as coming from the intended source. Now, I suppose in both cases you could copy the certificate id (https) or copy the ssh host id to provide some verification, but that seems like more work to

Re: What basic services are you missing in the charm store?

2015-09-28 Thread Bryan Quigley
On Wed, Aug 26, 2015 at 10:09 AM, Peter Sabaini wrote: > There doesn't seem to be a production openldap charm -- as boring > and normal as it gets ;-) +1. I'd also like to see Kerberos working with it and with hooks to our NFS charms. Zentyal is afaik the only