Problem with Barbican

Jan Wasilewski finarffin at gmail.com
Fri Sep 22 13:04:05 UTC 2023


Hi Derek,

Could you please share your 'barbican.conf' file along with information
about the operating system on which Docker and Barbican are running?
This additional information would shed more light on the topic and help
with further troubleshooting. There may be a configuration issue that needs
to be addressed.

/Jan Wasilewski

czw., 21 wrz 2023 o 11:54 Derek O keeffe <derekokeeffe85 at yahoo.ie>
napisał(a):

> Hi all,
>
> Hopefully someone may be able to give me some info/advice on this one.
> I've been asking in the IRC chat but unfortunately we couldn't get to the
> bottom of it, I'm hoping someone here may not be in the chat but able to
> help :)
>
> So I have an Openstack AIO that I'm trying to test Barbican on with a
> Thales Luna HSM. I get through the instructions to the point where I
> successfully create the HMAK and MKEK keys. After this I try the following
> commands:
>
> openstack secret store --name mysecret1 --payload testPayload
> openstack volume create --size 1 --type LUKS 'encrypted volume'
>
> Both of those fail and the logs from the Barbican container are here:
> Paste #bU1E0joDdf4eWiV8wjlj | LodgeIt!
> <https://paste.openstack.org/show/bU1E0joDdf4eWiV8wjlj/>
>
> Paste #bU1E0joDdf4eWiV8wjlj | LodgeIt!
>
> <https://paste.openstack.org/show/bU1E0joDdf4eWiV8wjlj/>
>
> I have made sure that "
>
> library_path: /opt/barbican/libs/libCryptoki2.so
>
>
> in Barbican.conf actually exists so I have no idea really where to look
> after this, I can't see any info as to where Barbican is trying to find the
> crypto plugin or maybe do I need to install something else manually??
>
> Anyway I hope someone might have some useful info or advice to help and
> thanks all for reading.
>
> Regards,
> Derek
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.openstack.org/pipermail/openstack-discuss/attachments/20230922/56bd0190/attachment.htm>


More information about the openstack-discuss mailing list