[openstack-dev] Barbican : Unable to reterieve asymmetric order request for rsa algorithm type

John Wood john.wood at RACKSPACE.COM
Tue Apr 7 18:58:38 UTC 2015


Hello Asha,

The root error here is that the stock plugin does not support generating 256 bit length asymmetric keys, rather only 1024, 2048 or 4096. Ideally you would have received a validation error when you POST-ed the order, but we have not yet integrated plugins with our validation process.

FYI, this link [1] shows the method that guides which algorithm parameters are supported by the default plugin.

Thanks for you patience,
John

[1]  https://github.com/openstack/barbican/blob/master/barbican/plugin/crypto/simple_crypto.py#L194



From: Asha Seshagiri <asha.seshagiri at gmail.com<mailto:asha.seshagiri at gmail.com>>
Date: Tuesday, April 7, 2015 at 12:23 PM
To: openstack-dev <openstack-dev at lists.openstack.org<mailto:openstack-dev at lists.openstack.org>>, Paul Kehrer <paul.kehrer at RACKSPACE.COM<mailto:paul.kehrer at RACKSPACE.COM>>, Adam Harwell <adam.harwell at RACKSPACE.COM<mailto:adam.harwell at RACKSPACE.COM>>
Cc: John Wood <john.wood at rackspace.com<mailto:john.wood at rackspace.com>>, "Reller, Nathan S." <Nathan.Reller at jhuapl.edu<mailto:Nathan.Reller at jhuapl.edu>>, Douglas Mendizabal <douglas.mendizabal at RACKSPACE.COM<mailto:douglas.mendizabal at RACKSPACE.COM>>, "alee at redhat.com<mailto:alee at redhat.com>" <alee at redhat.com<mailto:alee at redhat.com>>, Alexis Lee <alexisl at hp.com<mailto:alexisl at hp.com>>
Subject: Re: Barbican : Unable to reterieve asymmetric order request for rsa algorithm type

Hi All ,

I would like someone to provide the pointer so that I would look into this issue and confirm whether asymmetric order retrieval would be supported in Barbican.

Any help would be appreciated!

Thanks in advance,
Asha Seshagiri

On Fri, Apr 3, 2015 at 11:06 AM, Asha Seshagiri <asha.seshagiri at gmail.com<mailto:asha.seshagiri at gmail.com>> wrote:
Hi All ,

Could any one please let me know if Barbican would support asymmetric order retrieval and the request .
Please find the curl command and response for creating the order and retrieving  the order

root at barbican:~# curl -X POST -H 'content-type:application/json' -H 'X-Project-Id: 12345' -d '{"type" : "asymmetric", "meta": {"name": "secretnamepk2", "algorithm": "rsa", "bit_length": 256, "mode": "cbc", "payload_content_type": "application/octet-stream"}}'http://localhost:9311/v1/orders
{"order_ref": "http://localhost:9311/v1/orders/f9870bb5-4ba3-4b19-9fe3-bb0c2a53557c"}root at barbican:~#

root at barbican:~# curl -H 'Accept: application/json' -H 'X-Project-Id:12345' http://localhost:9311/v1/orders/f9870bb5-4ba3-4b19-9fe3-bb0c2a53557c
{"status": "ERROR", "updated": "2015-03-30T21:36:38.102832", "created": "2015-03-30T21:36:38.083428", "order_ref": "http://localhost:9311/v1/orders/f9870bb5-4ba3-4b19-9fe3-bb0c2a53557c", "meta": {"name": "secretnamepk2", "algorithm": "rsa", "payload_content_type": "application/octet-stream", "mode": "cbc", "bit_length": 256, "expiration": null}, "error_status_code": "400", "error_reason": "Process TypeOrder issue seen - No plugin was found that could support your request.", "type": "asymmetric"}root at barbican:~#

It seems that we are unable to reterive the asymmetric order request
Could any one please help.
Any Help would be appreciated.

Thanks in Advance

On Mon, Mar 30, 2015 at 4:42 PM, Asha Seshagiri <asha.seshagiri at gmail.com<mailto:asha.seshagiri at gmail.com>> wrote:
Hi All ,

I would like to know whether Barbican supports asymmetric order request .
Please find the curl command and response for creating the order and retrieving  the order

root at barbican:~# curl -X POST -H 'content-type:application/json' -H 'X-Project-Id: 12345' -d '{"type" : "asymmetric", "meta": {"name": "secretnamepk2", "algorithm": "rsa", "bit_length": 256, "mode": "cbc", "payload_content_type": "application/octet-stream"}}' http://localhost:9311/v1/orders
{"order_ref": "http://localhost:9311/v1/orders/f9870bb5-4ba3-4b19-9fe3-bb0c2a53557c"}root at barbican:~#

root at barbican:~# curl -H 'Accept: application/json' -H 'X-Project-Id:12345' http://localhost:9311/v1/orders/f9870bb5-4ba3-4b19-9fe3-bb0c2a53557c
{"status": "ERROR", "updated": "2015-03-30T21:36:38.102832", "created": "2015-03-30T21:36:38.083428", "order_ref": "http://localhost:9311/v1/orders/f9870bb5-4ba3-4b19-9fe3-bb0c2a53557c", "meta": {"name": "secretnamepk2", "algorithm": "rsa", "payload_content_type": "application/octet-stream", "mode": "cbc", "bit_length": 256, "expiration": null}, "error_status_code": "400", "error_reason": "Process TypeOrder issue seen - No plugin was found that could support your request.", "type": "asymmetric"}root at barbican:~#

Could any one please help.
Thanks in Advance
--
Thanks and Regards,
Asha Seshagiri



--
Thanks and Regards,
Asha Seshagiri



--
Thanks and Regards,
Asha Seshagiri
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150407/227b507b/attachment.html>


More information about the OpenStack-dev mailing list