//docs.openstack.org/;, "type": "text/html", "rel": "describedby"}]}]}}
Would like to know the reason behind the curl returning the href value with
HTTP response eventhough the request is made tp HTTPS configured
ow do we debug I*mportError: has no
'create_main_app_v1' attribute"*
And also I think that barbican restart is not successful.
Any help would highly be appreciated .
But I am able tor run the command "/bin/uwsgi --master --emperor
/etc/barbican/vassals&quo
Thanks Juan :) for your response.
On Sun, Aug 9, 2015 at 12:32 PM, Juan Antonio Osorio jaosor...@gmail.com
wrote:
It only runs the unit tests.
BR
On 9 Aug 2015 02:19, Asha Seshagiri asha.seshag...@gmail.com wrote:
Thanks a lot Juan for your response:)
One question I had
Thanks a lot Juan for your response:)
One question I had was the barbican.sh script would run only the unit tests
after the barbican installation right.
The functional tests needs to be runned explicitly using tox utility.
Thanks and Regards,
Asha Seshagiri
On Sat, Aug 8, 2015 at 3:45 AM, Juan
Thanks John for your response :)
I am currently working on the reconfiguring the HSM in different way.
Shall let you know once my stuff is working.
Thanks and Regards,
Asha Seshagiri
On Tue, Jul 28, 2015 at 11:31 AM, John Vrbanac john.vrba...@rackspace.com
wrote:
Asha,
I'm not sure what
Hi John ,
Any help would highly be appreciated.
Thanks and Regards,
Asha Seshagiri
On Mon, Jul 27, 2015 at 3:10 PM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Hi John ,
Thanks a lot for providing me the response:)
I followed the link[1] for configuring the HA SETUP
[1] : http
the steps or where I would have gone
wrong.
Thanks and Regards,
Asha Seshagiri
On Mon, Jul 27, 2015 at 2:36 PM, John Vrbanac john.vrba...@rackspace.com
wrote:
Asha,
I've used the Safenet HSM HA virtual slot setup and it does work.
However, the setup is very interesting because you need
Virtual slot configuration
since have mentioned the slot # 6 under in barbican.conf file and has
anyone tested HSM HA setup with Barbican. *
Any help would highly be appreciated!
--
*Thanks and Regards,*
*Asha Seshagiri
'an_mkek'
Verified label !
MKEK successfully generated!
[root@HSM-Client bin]# python pkcs11-key-generation --library-path
'/usr/lib/libCryptoki2_64.so' --passphrase 'test123' --slot-id 1 hmac
--label 'my_hmac_label'
HMAC successfully generated!
Thanks and Regards,
Asha Seshagiri
On Mon, Jul 20
Hi All ,
Would like to understand the usage of HMAC in HSM. From Barbican , we send
the request to generate MKEK and HMAC.
What is the relation between HMAC, MKEK AND KEK.
would need help in understanding HMAC.
--
*Thanks and Regards,*
*Asha Seshagiri
through the order resource is never persisted in HSM.
Please correct me if I am wrong.
Thanks and Regards,
Asha Seshagiri
On Tue, Jul 21, 2015 at 3:04 PM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Hi John ,
Thanks for providing the solution .
Its a bug in Barbican code , it works
--label an_mkek
HSM returned response code: 0x13L CKR_ATTRIBUTE_VALUE_INVALID
Would be of great help if l could the syntax for running the script
Thanks and Regards,
Asha Seshagiri
On Sun, Jul 19, 2015 at 6:25 PM, John Vrbanac john.vrba...@rackspace.com
wrote:
Don't include the curly brackets
- /usr/safenet/lunaclient/lib/libCryptoki2_64.so
- /usr/lib/libCryptoki2_64.so
- sudo ldconfig
- ldconfig -p
But the above solution failed and am geting the same error.
Any help would highly be apprecited.
Thanks in advance!
Thanks and Regards,
Asha Seshagiri
On Sat, Jul 18, 2015
) if returned_count[0]
== 1: return key elif returned_count[0] == 0: return None
*Need Help .Any help would highly be appreciated .It is very critical for
us to integrate with Barbican*
*Also would like to know if any one has integrated Barbican with HSM.*
--
*Thanks and Regards,*
*Asha Seshagiri
/secrets*
*{secret_ref:
http://184.172.96.189:9311/v1/secrets/275b99ad-71f5-4e4c-8bda-5c2b011c265b
http://184.172.96.189:9311/v1/secrets/275b99ad-71f5-4e4c-8bda-5c2b011c265b}[root@HSM-Client
~]#*
Any help would highly be appreciated.
--
*Thanks and Regards,*
*Asha Seshagiri
Thanks Mathew for providing the updated information :)
Thanks and Regards,
Asha Seshagiri
On Thu, Jul 2, 2015 at 2:32 PM, Matthew Treinish mtrein...@kortar.org
wrote:
On Wed, Jul 01, 2015 at 03:30:55PM -0500, Douglas Mendiz?bal wrote:
Hi Asha,
The blueprint you linked for Tempest
Hi All ,
Has anyone done the Tempest tests for Barbican API
Any help would be highly appreciated.
--
*Thanks and Regards,*
*Asha Seshagiri*
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe
]
https://blueprints.launchpad.net/tempest/+spec/add-basic-tests-for-barbican
Are above specs and blueprint have become void for Barbican?
Now I could use the link sent by you for validating the APIs
Thanks and Regards,
Asha Seshagiri
On Wed, Jul 1, 2015 at 2:32 PM, Douglas Mendizábal
Hi Douglas ,
Are there any Automated Test cases created for validating the Barbican APIs.
Thanks and Regards,
Asha Seshagiri
On Wed, Jul 1, 2015 at 3:12 PM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Thanks Douglas for your response and appreciate for pointing me to the
right link
I
Thanks a lot Douglas for your response :)
I would like to know the steps required to configure and run automated
functional test cases for validating Barbican APIs.
Thanks and Regards,
Asha Seshagiri
On Wed, Jul 1, 2015 at 3:30 PM, Douglas Mendizábal
douglas.mendiza...@rackspace.com wrote
Hi Douglas ,
It would be great if you could respond to the email with the explanation
provided in yesterday's IRC meeting so that I can share it with my team.
Thanks and Regards,
Asha Seshagiri
On Mon, Jun 8, 2015 at 2:13 PM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Thanks Nate for your
your opinion.
Thanks and Regards,
Asha Seshagiri
On Mon, Jun 8, 2015 at 8:36 AM, John Wood john.w...@rackspace.com wrote:
Hello Asha,
Barbican is not yet supporting the conversion of secrets of one format
to another. If you have thoughts on desired conversions however, please
mentioned
in
plain/text format.
Thanks and Regards,
Asha Seshagiri
On Sun, Jun 7, 2015 at 11:43 PM, John Wood john.w...@rackspace.com
wrote:
Hello Asha,
The AES type key should require an application/octet-stream Accept
header
to retrieve the secret as it is a binary type. Please
encoding length exceeds 32 bytes which is the maximum length for
doing AES encryption.
Would like to know the reason behind Barbican not supporting
the retrieval of the secret in text/plain format generated from the order
resource in plain/text format.
Thanks and Regards,
Asha Seshagiri
On Sun, Jun 7
block my further investigations on Encryption usecases using Babrican
Thanks and Regards,
Asha Seshagiri
On Wed, Jun 3, 2015 at 3:51 PM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Hi All,
Unable to retrieve the secret in text/plain format generated from
Barbican order resource
Please
be appreciated.
--
*Thanks and Regards,*
*Asha Seshagiri*
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin
Editing the subject
On Mon, Jun 1, 2015 at 2:35 AM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Hi All ,
Would like to know why have we removed the API details for Order and
Consumer Resource in the following update link for API Documentation of
Barbican
http://docs.openstack.org
would be highly appreciated.
Thanks in Advance
--
*Thanks and Regards,*
*Asha Seshagiri*
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
. Also, yes they are still supported.
John Vrbanac
--
*From:* Asha Seshagiri asha.seshag...@gmail.com
*Sent:* Monday, June 1, 2015 2:38 AM
*To:* openstack-dev
*Subject:* Re: [openstack-dev] Barbican : Regarding the API support for
Order and Consumer
Thanks John for providing the pointer to the fix and also thank all
contributors for providing the quick fix.
Thanks and Regards,
Asha Seshagiri
On Fri, May 15, 2015 at 3:30 PM, John Vrbanac john.vrba...@rackspace.com
wrote:
Asha,
We landed the fix in: https://review.openstack.org/#/c/183391
: null,
expiration: null}], total: 1}[root@Clientfor-HAProxy barbican]#
Thanks and Regards,
Asha Seshagiri
On Wed, May 13, 2015 at 4:26 PM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Hi all ,
When I started debugging ,we find that default group is not used instead
oslo_policy would
.
This should be the expected behavior from security perspective .And also we
are able to access secrets by providing the right token from the Identity
service (Keystone ).
Looking forward for your response.
Thanks and Regards,
Asha Seshagiri
On Thu, May 14, 2015 at 4:43 PM, John Vrbanac john.vrba
could help me out with this.Any help would be
highly appreciated.
Thanks in advance
Thanks and Regards,
Asha Seshagiri
On Tue, May 12, 2015 at 6:31 PM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Hi All ,
Installed the barbican today taking the source from github and executed
the basic curl
sqlite3.Connection object at 0x53d8dc8 _close_connection
/usr/lib64/python2.7/site-packages/sqlalchemy/pool.py:248
*Any help would be highly appreciated since this would impact my work on
setting up HA proxy for Barbican*
Thanks in advance !
--
*Thanks and Regards,*
*Asha Seshagiri
that barbican-api would be
used only to standup the barbican instance , for installation of barbican
,debugging and stoping the barbican instance , we still need to use
barbican.sh script .
Any help would highly be appreciated.
Thanks and Regards,
Asha Seshagiri
On Thu, Apr 23, 2015 at 10:28 AM
services. The script does not start the uwsgi server
Please correct me if I am wrong.
Any help would be highly appreciated.
Thanks and Regards,
Asha Seshagiri
On Thu, Apr 23, 2015 at 11:27 AM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Hi All,
Thanks Adam for your response.
I am able to run
please elaborate the syntax.
Looking forward for your response.
Thanks and Regards,
Asha Seshagiri
On Thu, Apr 23, 2015 at 4:42 PM, Douglas Mendizabal
douglas.mendiza...@rackspace.com wrote:
Hi Asha,
I hope I can clear up some of your confusion about the Barbican server.
Barbican is a standard
dependices on Barbican script.
Any help would be highly appreciated and also would like to know opinion
from the openstack group on the changes indicated
Thanks in advance
*Thanks and Regards,*
*Asha Seshagiri*
__
OpenStack
Thanks a lot John for your response.
I appreciate for your time and effort in answering the queries and also
pointing to the latest changes which you been always doing :)
Thanks and Regards,
Asha Seshagiri
On Wed, Apr 22, 2015 at 6:09 PM, John Wood john.w...@rackspace.com wrote:
Hello Asha
-4691-40d6-af9a-1ae23772a7b2
▒▒R▒v▒▒▒W▒4▒A?Md▒L[▒K4A▒▒bx▒▒▒ - * would like to know if this response
is encyprted by barbican using KEKS or it is unencypted format whose
content type is application/octet-stream*
Thanks and Regards,
Asha Seshagiri
On Fri, Apr 17, 2015 at 11:30 AM, Asha Seshagiri
will have a look into it
Once again , it's nice working and collaborating with the openstack Dev
-group.
Thanks and Regards,
Asha Seshagiri
jh
Thanks and Regards,
Asha Seshagiri
On Thu, Apr 16, 2015 at 8:10 AM, John Wood john.w...@rackspace.com wrote:
Hello Asha,
The /v1/secrets
Thanks a lot John for your response.
It has helped me .
Thanks and Regards,
Asha Seshagiri
On Fri, Apr 17, 2015 at 2:28 PM, John Wood john.w...@rackspace.com wrote:
Hello Asha,
So the last step you have is retrieving a decrypted secret from
Barbican. Barbican indeed stores the secret
,*
*Asha Seshagiri*
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Thanks a lot John for your response.
The issue was were working with keystone server which is SSL enabled and we
need to configure Barbican to provide clients side certificate.
Thanks and Regards,
Asha Seshagiri
On Tue, Apr 7, 2015 at 6:26 PM, John Wood john.w...@rackspace.com wrote:
Hello
for posting the secret is not
geting authenticated with Keystone V3
Any help would highly be appreciated.
--
*Thanks and Regards,*
*Asha Seshagiri*
barbican-api-paste.ini
Description: Binary data
barbican-admin-paste.ini
Description: Binary data
Hi All ,
I would like someone to provide the pointer so that I would look into this
issue and confirm whether asymmetric order retrieval would be supported in
Barbican.
Any help would be appreciated!
Thanks in advance,
Asha Seshagiri
On Fri, Apr 3, 2015 at 11:06 AM, Asha Seshagiri asha.seshag
Thanks a lot John for your time and response.
It helped me and answered my query
Thanks and Regards,
Asha Seshagiri
On Tue, Apr 7, 2015 at 1:58 PM, John Wood john.w...@rackspace.com wrote:
Hello Asha,
The root error here is that the stock plugin does not support generating
256 bit length
with only modification in *barbican-api-paste.ini
file and not **barbican-admin-paste.ini so that I can start looking into
the issue with the changes mentioned in link1 alone.*
Thanks and Regards,
Asha Seshagiri
On Tue, Apr 7, 2015 at 2:08 PM, John Wood john.w...@rackspace.com wrote:
Hello Asha
:~#
*It seems that we are unable to reterive the asymmetric order request*
Could any one please help.
Any Help would be appreciated.
Thanks in Advance
On Mon, Mar 30, 2015 at 4:42 PM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Hi All ,
I would like to know whether Barbican supports asymmetric order
service de-registers when you stop using the container.
--Adam
From: John Wood john.w...@rackspace.com
Date: Tuesday, March 31, 2015 12:06 AM
To: Asha Seshagiri asha.seshag...@gmail.com, openstack-dev
openstack-dev@lists.openstack.org
Cc: Reller, Nathan S. nathan.rel...@jhuapl.edu, Douglas
}
{
type: key,
meta: {
name: secretname,
algorithm: AES,
bit_length: 256,
mode: cbc,
payload_content_type: application/octet-stream
}
}
What does the mode value cbc indicate ?
--
*Thanks and Regards,*
*Asha Seshagiri
Any help would be appreciated ?
Thanks in advance !
Thanks and Regards,
Asha Seshagiri
On Mon, Mar 30, 2015 at 12:45 PM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Hi All ,
What is the use of the mode attribute ? what does the value of this
attribute signify and what are the possible
Thanks a lot Douglas for your response. It helped me .
What are the possible values of algorithm attribute? Is AES only supported
algorithm type for Barbican or does it support any other algorithm type?
Thanks and Regards,
Asha Seshagiri
On Mon, Mar 30, 2015 at 1:04 PM, Douglas Mendizabal
in Advance
--
*Thanks and Regards,*
*Asha Seshagiri*
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin
resource ,
How does client consume or use the consumer resource*
Any Help would be appreciated.
Thanks Asha.
On Mon, Mar 30, 2015 at 12:05 AM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Hi All,
Once the consumer resource registers to the containers , how does the
consumer resource
--
*Thanks and Regards*
*Asha Seshagiri*
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo
Hi All,
Once the consumer resource registers to the containers , how does the
consumer resource consume the container resource?
Is there any API supporting the above operation.
Could any one please help on this?
--
*Thanks and Regards,*
*Asha Seshagiri
)
Any help would be appreciated!
Thanks in advance !
--
*Thanks and Regards,*
*Asha Seshagiri*
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org
alembic - will install alembic
- yum install openldap-devel
- pip install python-ldap
Thanks and Regards,
Asha Seshagiri
On Wed, Mar 25, 2015 at 5:17 PM, John Wood john.w...@rackspace.com wrote:
Hello Asha,
It seems like your installer script might be crashing for some reason.
You might
*{code: 405, description: , title: Method Not Allowed}*
It would be great if some one could help me .
Thanks in advance.
--
*Thanks and Regards,*
*Asha Seshagiri*
__
OpenStack Development Mailing List (not for usage questions
Could anyone provide the clarity on content type of the header
Thanks and Regards,
Asha Seshagiri
On Fri, Mar 20, 2015 at 2:05 PM, Asha Seshagiri asha.seshag...@gmail.com
wrote:
Hi All ,
I am unable to send the PUT request using the CURL command for storing the
secret .
root@barbican:~# curl
Hi Douglas ,
Thanks a lot for your help .It worked .
--
*Thanks and Regards,*
*Asha Seshagiri*
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org
a private_key .Does the same thing holds good with the
public key as well.
What is private_key_passpharse and what is the difference between
private_key and private_key_passpharse ?
It would be great if anyone could help me on this .
Thanks in advance !
--
*Thanks and Regards,*
*Asha Seshagiri
@barbican:~#
Thanks in advance.
--
*Thanks and Regards,*
*Asha Seshagiri*
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http
@barbican:~#
Thanks in advance.
--
*Thanks and Regards,*
*Asha Seshagiri*
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http
65 matches
Mail list logo
