)]}'
{"api-ref/source/parameters.yaml":[{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"01321c13d331614bc03e6af0d95830d6d84b4b31","unresolved":false,"context_lines":[{"line_number":246,"context_line":"default_tls_container_ref:"},{"line_number":247,"context_line":"  description: |"},{"line_number":248,"context_line":"    The URI to the `key manager service"},{"line_number":249,"context_line":"    \u003chttps://docs.openstack.org/barbican/latest/\u003e`__ secret containing a"},{"line_number":250,"context_line":"    PKCS12 format certificate/key bundle for ``TERMINATED_TLS`` listeners."},{"line_number":251,"context_line":"    (DEPRECATED) A secret container of type \"certificate\" containing the"},{"line_number":252,"context_line":"    certificate and key for ``TERMINATED_TLS`` listeners."}],"source_content_type":"text/x-yaml","patch_set":24,"id":"9f91af0f_2072c312","line":249,"range":{"start_line":249,"start_character":4,"end_line":249,"end_character":49},"updated":"2018-01-03 21:11:57.000000000","message":"Is this still the right link? Should we include a castellan link?","commit_id":"34f01ab5a5ecd33e55124c67d2af01fa47ff2a85"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"0affd0a872c14126239f7b929b5162dddd50ff0d","unresolved":false,"context_lines":[{"line_number":246,"context_line":"default_tls_container_ref:"},{"line_number":247,"context_line":"  description: |"},{"line_number":248,"context_line":"    The URI to the `key manager service"},{"line_number":249,"context_line":"    \u003chttps://docs.openstack.org/barbican/latest/\u003e`__ secret containing a"},{"line_number":250,"context_line":"    PKCS12 format certificate/key bundle for ``TERMINATED_TLS`` listeners."},{"line_number":251,"context_line":"    (DEPRECATED) A secret container of type \"certificate\" containing the"},{"line_number":252,"context_line":"    certificate and key for ``TERMINATED_TLS`` listeners."}],"source_content_type":"text/x-yaml","patch_set":24,"id":"9f91af0f_b4d4d1be","line":249,"range":{"start_line":249,"start_character":4,"end_line":249,"end_character":49},"in_reply_to":"9f91af0f_2072c312","updated":"2018-01-04 01:21:46.000000000","message":"Yeah that\u0027s probably better.","commit_id":"34f01ab5a5ecd33e55124c67d2af01fa47ff2a85"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"01321c13d331614bc03e6af0d95830d6d84b4b31","unresolved":false,"context_lines":[{"line_number":248,"context_line":"    The URI to the `key manager service"},{"line_number":249,"context_line":"    \u003chttps://docs.openstack.org/barbican/latest/\u003e`__ secret containing a"},{"line_number":250,"context_line":"    PKCS12 format certificate/key bundle for ``TERMINATED_TLS`` listeners."},{"line_number":251,"context_line":"    (DEPRECATED) A secret container of type \"certificate\" containing the"},{"line_number":252,"context_line":"    certificate and key for ``TERMINATED_TLS`` listeners."},{"line_number":253,"context_line":"  in: body"},{"line_number":254,"context_line":"  required: true"}],"source_content_type":"text/x-yaml","patch_set":24,"id":"9f91af0f_406d8730","line":251,"range":{"start_line":251,"start_character":4,"end_line":251,"end_character":16},"updated":"2018-01-03 21:11:57.000000000","message":"Maybe \"DEPRECATED:\" would be more clear?","commit_id":"34f01ab5a5ecd33e55124c67d2af01fa47ff2a85"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"0affd0a872c14126239f7b929b5162dddd50ff0d","unresolved":false,"context_lines":[{"line_number":248,"context_line":"    The URI to the `key manager service"},{"line_number":249,"context_line":"    \u003chttps://docs.openstack.org/barbican/latest/\u003e`__ secret containing a"},{"line_number":250,"context_line":"    PKCS12 format certificate/key bundle for ``TERMINATED_TLS`` listeners."},{"line_number":251,"context_line":"    (DEPRECATED) A secret container of type \"certificate\" containing the"},{"line_number":252,"context_line":"    certificate and key for ``TERMINATED_TLS`` listeners."},{"line_number":253,"context_line":"  in: body"},{"line_number":254,"context_line":"  required: true"}],"source_content_type":"text/x-yaml","patch_set":24,"id":"9f91af0f_54db05ec","line":251,"range":{"start_line":251,"start_character":4,"end_line":251,"end_character":16},"in_reply_to":"9f91af0f_406d8730","updated":"2018-01-04 01:21:46.000000000","message":"I don\u0027t really care. will change.","commit_id":"34f01ab5a5ecd33e55124c67d2af01fa47ff2a85"}],"doc/source/user/guides/basic-cookbook.rst":[{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"ac4260e665952629f428390a1790c38e8339ba11","unresolved":false,"context_lines":[{"line_number":316,"context_line":""},{"line_number":317,"context_line":"* Back-end servers 192.0.2.10 and 192.0.2.11 on subnet *private-subnet* have"},{"line_number":318,"context_line":"  been configured with regular HTTP application on TCP port 80."},{"line_number":319,"context_line":"* These back-end servers have been configured with a health check at the URL"},{"line_number":320,"context_line":"  path \"/healthcheck\". See :ref:`http-heath-monitors` below."},{"line_number":321,"context_line":"* Subnet *public-subnet* is a shared external subnet created by the cloud"},{"line_number":322,"context_line":"  operator which is reachable from the internet."}],"source_content_type":"text/x-rst","patch_set":4,"id":"1f2f7f8d_8ed67bf1","line":319,"updated":"2017-09-19 08:10:46.000000000","message":"No healthcheck in the example ... Really this is unnecessary here.","commit_id":"33dd0c772d9de8d6366f5533addd5d5273f0c74b"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"ac4260e665952629f428390a1790c38e8339ba11","unresolved":false,"context_lines":[{"line_number":349,"context_line":"::"},{"line_number":350,"context_line":""},{"line_number":351,"context_line":"    openssl pkcs12 -export -inkey server.key -in server.crt -chain ca-chain.p7b -out server.p12"},{"line_number":352,"context_line":"    openstack secret store --name\u003d\u0027cert1\u0027 --payload-content-type\u003d\u0027application/x-pkcs12\u0027 --payload\u003d\"$(cat server.p12)\""},{"line_number":353,"context_line":"    openstack acl user add -u admin_id $(openstack secret list | awk \u0027/ cert1 / {print $2}\u0027)"},{"line_number":354,"context_line":"    openstack loadbalancer create --name lb1 --vip-subnet-id public-subnet"},{"line_number":355,"context_line":"    # Re-run the following until lb1 shows ACTIVE and ONLINE statuses:"}],"source_content_type":"text/x-rst","patch_set":4,"id":"1f2f7f8d_eecf3f55","line":352,"updated":"2017-09-19 08:10:46.000000000","message":"This doesn\u0027t work... Trying to figure out how to actually upload binary data.","commit_id":"33dd0c772d9de8d6366f5533addd5d5273f0c74b"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"7aa4a9058b9fa2a7369bee7ab42fcce772934f96","unresolved":false,"context_lines":[{"line_number":347,"context_line":"::"},{"line_number":348,"context_line":""},{"line_number":349,"context_line":"    openssl pkcs12 -export -inkey server.key -in server.crt -chain ca-chain.p7b -out server.p12"},{"line_number":350,"context_line":"    openstack secret store --name\u003d\u0027tls_secret1\u0027 --payload-content-type\u003d\u0027application/x-pkcs12\u0027 --payload\u003d\"$(cat server.p12)\""},{"line_number":351,"context_line":"    openstack acl user add -u admin_id $(openstack secret list | awk \u0027/ tls_secret1 / {print $2}\u0027)"},{"line_number":352,"context_line":"    openstack loadbalancer create --name lb1 --vip-subnet-id public-subnet"},{"line_number":353,"context_line":"    # Re-run the following until lb1 shows ACTIVE and ONLINE statuses:"}],"source_content_type":"text/x-rst","patch_set":5,"id":"ff5d4b2f_f9f8237d","line":350,"updated":"2017-09-19 08:11:47.000000000","message":"This isn\u0027t the right content type for barbican to handle binary data, I believe, even though it is actually the correct content type for the data. Trying to figure this out.","commit_id":"9b93b0e930d4d978e33618dfcf82d0d75ff37207"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"521472d689103facff140700f4a1c7f450b78a80","unresolved":false,"context_lines":[{"line_number":411,"context_line":"    openstack loadbalancer create --name lb1 --vip-subnet-id public-subnet"},{"line_number":412,"context_line":"    # Re-run the following until lb1 shows ACTIVE and ONLINE statuses:"},{"line_number":413,"context_line":"    openstack loadbalancer show lb1"},{"line_number":414,"context_line":"    neutron lbaas-listener-create --loadbalancer lb1 --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container\u003d$(openstack secret container list | awk \u0027/ tls_container1 / {print $2}\u0027) --sni-container_refs $(openstack secret container list | awk \u0027/ tls_container1 / {print $2}\u0027) $(openstack secret container list | awk \u0027/ tls_container2 / {print $2}\u0027)"},{"line_number":415,"context_line":"    openstack loadbalancer listener create --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container\u003d$(openstack secret list | awk \u0027/ tls_secret1 / {print $2}\u0027 --sni-container_refs $(openstack secret list | awk \u0027/ tls_secret1 / {print $2}\u0027) $(openstack secret list | awk \u0027/ tls_secret2 / {print $2}\u0027) lb1"},{"line_number":416,"context_line":"    openstack loadbalancer pool create --name pool1 --lb-algorithm ROUND_ROBIN --listener listener1 --protocol HTTP"},{"line_number":417,"context_line":"    openstack loadbalancer member create --subnet-id private-subnet --address 192.0.2.10 --protocol-port 80 pool1"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3f4b6375_86cc4abb","line":414,"updated":"2017-11-07 00:46:02.000000000","message":"Note: I fixed this in the dependent docs patch that finishes the OSC transition.","commit_id":"d271170a2d194abf24d30da1abc29bde1bc47410"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"e284f663d0069147c7d57466f29e413c54c4a2fa","unresolved":false,"context_lines":[{"line_number":411,"context_line":"    openstack loadbalancer create --name lb1 --vip-subnet-id public-subnet"},{"line_number":412,"context_line":"    # Re-run the following until lb1 shows ACTIVE and ONLINE statuses:"},{"line_number":413,"context_line":"    openstack loadbalancer show lb1"},{"line_number":414,"context_line":"    neutron lbaas-listener-create --loadbalancer lb1 --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container\u003d$(openstack secret container list | awk \u0027/ tls_container1 / {print $2}\u0027) --sni-container_refs $(openstack secret container list | awk \u0027/ tls_container1 / {print $2}\u0027) $(openstack secret container list | awk \u0027/ tls_container2 / {print $2}\u0027)"},{"line_number":415,"context_line":"    openstack loadbalancer listener create --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container\u003d$(openstack secret list | awk \u0027/ tls_secret1 / {print $2}\u0027 --sni-container_refs $(openstack secret list | awk \u0027/ tls_secret1 / {print $2}\u0027) $(openstack secret list | awk \u0027/ tls_secret2 / {print $2}\u0027) lb1"},{"line_number":416,"context_line":"    openstack loadbalancer pool create --name pool1 --lb-algorithm ROUND_ROBIN --listener listener1 --protocol HTTP"},{"line_number":417,"context_line":"    openstack loadbalancer member create --subnet-id private-subnet --address 192.0.2.10 --protocol-port 80 pool1"}],"source_content_type":"text/x-rst","patch_set":15,"id":"3f4b6375_26759632","line":414,"updated":"2017-11-07 00:52:58.000000000","message":"Remove this.","commit_id":"6c56dd8aca0e0ec25cded64bd74d3dde23060410"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"6fede5a4c97e656f6ae214684aa949309c40ba11","unresolved":false,"context_lines":[{"line_number":411,"context_line":"    openstack loadbalancer create --name lb1 --vip-subnet-id public-subnet"},{"line_number":412,"context_line":"    # Re-run the following until lb1 shows ACTIVE and ONLINE statuses:"},{"line_number":413,"context_line":"    openstack loadbalancer show lb1"},{"line_number":414,"context_line":"    neutron lbaas-listener-create --loadbalancer lb1 --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container\u003d$(openstack secret container list | awk \u0027/ tls_container1 / {print $2}\u0027) --sni-container_refs $(openstack secret container list | awk \u0027/ tls_container1 / {print $2}\u0027) $(openstack secret container list | awk \u0027/ tls_container2 / {print $2}\u0027)"},{"line_number":415,"context_line":"    openstack loadbalancer listener create --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container\u003d$(openstack secret list | awk \u0027/ tls_secret1 / {print $2}\u0027 --sni-container_refs $(openstack secret list | awk \u0027/ tls_secret1 / {print $2}\u0027) $(openstack secret list | awk \u0027/ tls_secret2 / {print $2}\u0027) lb1"},{"line_number":416,"context_line":"    openstack loadbalancer pool create --name pool1 --lb-algorithm ROUND_ROBIN --listener listener1 --protocol HTTP"},{"line_number":417,"context_line":"    openstack loadbalancer member create --subnet-id private-subnet --address 192.0.2.10 --protocol-port 80 pool1"}],"source_content_type":"text/x-rst","patch_set":15,"id":"3f4b6375_066f3a28","line":414,"in_reply_to":"3f4b6375_26759632","updated":"2017-11-07 01:01:21.000000000","message":"Lol not sure how that got there.","commit_id":"6c56dd8aca0e0ec25cded64bd74d3dde23060410"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"e284f663d0069147c7d57466f29e413c54c4a2fa","unresolved":false,"context_lines":[{"line_number":594,"context_line":"several forms, and is a file provided by the organization from whom you"},{"line_number":595,"context_line":"obtained your TLS certificate."},{"line_number":596,"context_line":""},{"line_number":597,"context_line":"PEM-encoded chains"},{"line_number":598,"context_line":"------------------"},{"line_number":599,"context_line":"The simplest form of the intermediate chain is a PEM-encoded text file that"},{"line_number":600,"context_line":"either contains a sequence of individually-encoded PEM certificates, or a PEM"},{"line_number":601,"context_line":"encoded PKCS7 block(s). If this is the type of intermediate chain you have been"},{"line_number":602,"context_line":"provided, the file will contain either ``-----BEGIN PKCS7-----`` or"},{"line_number":603,"context_line":"``-----BEGIN CERTIFICATE-----`` near the top of the file, and one or more"},{"line_number":604,"context_line":"blocks of 64-character lines of ASCII text (that will look like gobbedlygook to"},{"line_number":605,"context_line":"a human). These files are also typically named with a ``.crt`` or ``.pem``"},{"line_number":606,"context_line":"extension."},{"line_number":607,"context_line":""},{"line_number":608,"context_line":"To upload this type of intermediates chain to barbican, run a command similar"},{"line_number":609,"context_line":"to the following (assuming \"intermediates-chain.pem\" is the name of the file):"},{"line_number":610,"context_line":""},{"line_number":611,"context_line":"::"},{"line_number":612,"context_line":""},{"line_number":613,"context_line":"    openstack secret store --name\u003d\u0027intermediates1\u0027 --payload-content-type\u003d\u0027text/plain\u0027 --payload\u003d\"$(cat intermediates-chain.pem)\""},{"line_number":614,"context_line":""},{"line_number":615,"context_line":"DER-encoded chains"},{"line_number":616,"context_line":"------------------"},{"line_number":617,"context_line":"If the intermediates chain provided to you is a file that contains what appears"},{"line_number":618,"context_line":"to be random binary data, it is likely that it is a PKCS7 chain in DER format."},{"line_number":619,"context_line":"These files also may be named with a ``.p7b`` extension. In order to use this"},{"line_number":620,"context_line":"intermediates chain, you can either convert it to a series of PEM-encoded"},{"line_number":621,"context_line":"certificates with the following command:"},{"line_number":622,"context_line":""},{"line_number":623,"context_line":"::"},{"line_number":624,"context_line":""},{"line_number":625,"context_line":"    openssl pkcs7 -in intermediates-chain.p7b -inform DER -print_certs -out intermediates-chain.pem"},{"line_number":626,"context_line":""},{"line_number":627,"context_line":"...or convert it into a PEM-encoded PKCS7 bundle with the following command:"},{"line_number":628,"context_line":""},{"line_number":629,"context_line":"::"},{"line_number":630,"context_line":""},{"line_number":631,"context_line":"    openssl pkcs7 -in intermediates-chain.p7b -inform DER -outform PEM -out intermediates-chain.pem"},{"line_number":632,"context_line":""},{"line_number":633,"context_line":"...or simply upload the binary DER file to barbican without conversion:"},{"line_number":634,"context_line":""},{"line_number":635,"context_line":"::"},{"line_number":636,"context_line":""},{"line_number":637,"context_line":"    openstack secret store --name\u003d\u0027intermediates1\u0027 --payload-content-type\u003d\u0027application/octet-stream\u0027 --payload-content-encoding\u003d\u0027base64\u0027 --payload\u003d\"$(cat intermediates-chain.p7b | base64)\""},{"line_number":638,"context_line":""},{"line_number":639,"context_line":"In any case, if the file is not a PKCS7 DER bundle, then either of the above"},{"line_number":640,"context_line":"two openssl commands will fail."},{"line_number":641,"context_line":""},{"line_number":642,"context_line":"Further reading"},{"line_number":643,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":15,"id":"3f4b6375_a696263d","line":640,"range":{"start_line":597,"start_character":0,"end_line":640,"end_character":31},"updated":"2017-11-07 00:52:58.000000000","message":"This needs updating.","commit_id":"6c56dd8aca0e0ec25cded64bd74d3dde23060410"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"01321c13d331614bc03e6af0d95830d6d84b4b31","unresolved":false,"context_lines":[{"line_number":312,"context_line":"to the load balancer, and enable the possibility of using advanced load"},{"line_number":313,"context_line":"balancer features, like Layer 7 features and header manipulation."},{"line_number":314,"context_line":""},{"line_number":315,"context_line":"**Scenario description**:"},{"line_number":316,"context_line":""},{"line_number":317,"context_line":"* Back-end servers 192.0.2.10 and 192.0.2.11 on subnet *private-subnet* have"},{"line_number":318,"context_line":"  been configured with regular HTTP application on TCP port 80."}],"source_content_type":"text/x-rst","patch_set":24,"id":"9f91af0f_40db47ec","line":315,"range":{"start_line":315,"start_character":0,"end_line":315,"end_character":25},"updated":"2018-01-03 21:11:57.000000000","message":"We should call out here that this is assuming the use of barbican.\nDoes \"openstack secret store\" make sense when using castellan? I.e. with Vault?","commit_id":"34f01ab5a5ecd33e55124c67d2af01fa47ff2a85"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"0affd0a872c14126239f7b929b5162dddd50ff0d","unresolved":false,"context_lines":[{"line_number":312,"context_line":"to the load balancer, and enable the possibility of using advanced load"},{"line_number":313,"context_line":"balancer features, like Layer 7 features and header manipulation."},{"line_number":314,"context_line":""},{"line_number":315,"context_line":"**Scenario description**:"},{"line_number":316,"context_line":""},{"line_number":317,"context_line":"* Back-end servers 192.0.2.10 and 192.0.2.11 on subnet *private-subnet* have"},{"line_number":318,"context_line":"  been configured with regular HTTP application on TCP port 80."}],"source_content_type":"text/x-rst","patch_set":24,"id":"9f91af0f_d4f0756a","line":315,"range":{"start_line":315,"start_character":0,"end_line":315,"end_character":25},"in_reply_to":"9f91af0f_40db47ec","updated":"2018-01-04 01:21:46.000000000","message":"No, that\u0027s the Barbican commandline tool. Castellan has no API, and only refers to secrets uploaded by other means. For our reference guide though, it makes sense to use Barbican.","commit_id":"34f01ab5a5ecd33e55124c67d2af01fa47ff2a85"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"3165d973ea49a0a206e6ff02e0a59f4f60401073","unresolved":false,"context_lines":[{"line_number":347,"context_line":""},{"line_number":348,"context_line":"::"},{"line_number":349,"context_line":""},{"line_number":350,"context_line":"    openssl pkcs12 -export -inkey server.key -in server.crt -certfile ca-chain.crt -out server.p12"},{"line_number":351,"context_line":"    openstack secret store --name\u003d\u0027tls_secret1\u0027 -t \u0027application/octet-stream\u0027 -e \u0027base64\u0027 --payload\u003d\"$(base64 \u003c server.p12)\""},{"line_number":352,"context_line":"    openstack acl user add -u admin_id $(openstack secret list | awk \u0027/ tls_secret1 / {print $2}\u0027)"},{"line_number":353,"context_line":"    openstack loadbalancer create --name lb1 --vip-subnet-id public-subnet"}],"source_content_type":"text/x-rst","patch_set":26,"id":"9f91af0f_424ed06f","line":350,"updated":"2018-01-04 23:58:30.000000000","message":"This command prompts for an export password (even with the -nodes flag) which confuses me as the release notes state there cannot be a passphrase on this. I think something is missing here.","commit_id":"b3f6bf93fab28d83f60b1e2a691273bd04df0596"},{"author":{"_account_id":2245,"name":"Jacky Hu","email":"hudayou@hotmail.com","username":"hudayou"},"change_message_id":"dfe33dff55545405793bdfc5f959f3ef4daf7156","unresolved":false,"context_lines":[{"line_number":347,"context_line":""},{"line_number":348,"context_line":"::"},{"line_number":349,"context_line":""},{"line_number":350,"context_line":"    openssl pkcs12 -export -inkey server.key -in server.crt -certfile ca-chain.crt -out server.p12"},{"line_number":351,"context_line":"    openstack secret store --name\u003d\u0027tls_secret1\u0027 -t \u0027application/octet-stream\u0027 -e \u0027base64\u0027 --payload\u003d\"$(base64 \u003c server.p12)\""},{"line_number":352,"context_line":"    openstack acl user add -u admin_id $(openstack secret list | awk \u0027/ tls_secret1 / {print $2}\u0027)"},{"line_number":353,"context_line":"    openstack loadbalancer create --name lb1 --vip-subnet-id public-subnet"}],"source_content_type":"text/x-rst","patch_set":26,"id":"7f96bb07_02c53f3c","line":350,"in_reply_to":"9f91af0f_424ed06f","updated":"2018-01-23 03:23:27.000000000","message":"Missing -passout pass: here","commit_id":"b3f6bf93fab28d83f60b1e2a691273bd04df0596"}],"releasenotes/notes/Support-PKCS12-certificate-objects-1c6e896be9d35977.yaml":[{"author":{"_account_id":2245,"name":"Jacky Hu","email":"hudayou@hotmail.com","username":"hudayou"},"change_message_id":"c7fbd4ea779d64b56b7431f2e92a92613df6f555","unresolved":false,"context_lines":[{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Users can now use a reference to a single PKCS12 bundle as their"},{"line_number":5,"context_line":"    `default_tls_container_ref ` instead of a Barbican container with"},{"line_number":6,"context_line":"    individual secret objects. PKCS12 supports bundling a private key,"},{"line_number":7,"context_line":"    certificate, and intermediates. Private keys can no longer be passphrase"},{"line_number":8,"context_line":"    protected."}],"source_content_type":"text/x-yaml","patch_set":19,"id":"df87a7cf_1c80688b","line":5,"updated":"2017-12-04 11:10:47.000000000","message":"no space before `","commit_id":"e2f7a7bc883aea18c4791cbb05427801e648c73d"},{"author":{"_account_id":2245,"name":"Jacky Hu","email":"hudayou@hotmail.com","username":"hudayou"},"change_message_id":"c7fbd4ea779d64b56b7431f2e92a92613df6f555","unresolved":false,"context_lines":[{"line_number":14,"context_line":"  - |"},{"line_number":15,"context_line":"    Private keys can no longer be password protected, as PKCS12 does not"},{"line_number":16,"context_line":"    support storing a passphrase in an explicitly defined way. Note that this"},{"line_number":17,"context_line":"    is not noticably less secure than storing a passphrase protected private"},{"line_number":18,"context_line":"    key in the same place as the passphrase."}],"source_content_type":"text/x-yaml","patch_set":19,"id":"df87a7cf_dc9440eb","line":17,"updated":"2017-12-04 11:10:47.000000000","message":"noticably-\u003enoticeably","commit_id":"e2f7a7bc883aea18c4791cbb05427801e648c73d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"9de926ea911177e51cb5efb603d9034f113a793a","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":21,"id":"df87a7cf_2ec9b257","line":19,"updated":"2017-12-11 23:18:32.000000000","message":"please document how the system falls back on the legacy BBQ driver","commit_id":"703e99dc87f171006082112c25265c550beb34f9"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"a4766f732ca7f9f91e016e121e9d78a6a60fe2f7","unresolved":false,"context_lines":[{"line_number":4,"context_line":"    Users can now use a reference to a single PKCS12 bundle as their"},{"line_number":5,"context_line":"    `default_tls_container_ref` instead of a Barbican container with"},{"line_number":6,"context_line":"    individual secret objects. PKCS12 supports bundling a private key,"},{"line_number":7,"context_line":"    certificate, and intermediates. Private keys can no longer be passphrase"},{"line_number":8,"context_line":"    protected."},{"line_number":9,"context_line":"    No configuration change is necessary to enable this feature. Users may"},{"line_number":10,"context_line":"    simply begin using this. Any use of the old style containers will be"},{"line_number":11,"context_line":"    detected and automatically fall back to using the old Barbican driver."}],"source_content_type":"text/x-yaml","patch_set":24,"id":"9f91af0f_204403b7","line":8,"range":{"start_line":7,"start_character":36,"end_line":8,"end_character":14},"updated":"2018-01-03 21:05:23.000000000","message":"This is true only for the new PKC12 format right? Legacy barbican containers can still hold/use passphrases right?","commit_id":"34f01ab5a5ecd33e55124c67d2af01fa47ff2a85"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"0affd0a872c14126239f7b929b5162dddd50ff0d","unresolved":false,"context_lines":[{"line_number":4,"context_line":"    Users can now use a reference to a single PKCS12 bundle as their"},{"line_number":5,"context_line":"    `default_tls_container_ref` instead of a Barbican container with"},{"line_number":6,"context_line":"    individual secret objects. PKCS12 supports bundling a private key,"},{"line_number":7,"context_line":"    certificate, and intermediates. Private keys can no longer be passphrase"},{"line_number":8,"context_line":"    protected."},{"line_number":9,"context_line":"    No configuration change is necessary to enable this feature. Users may"},{"line_number":10,"context_line":"    simply begin using this. Any use of the old style containers will be"},{"line_number":11,"context_line":"    detected and automatically fall back to using the old Barbican driver."}],"source_content_type":"text/x-yaml","patch_set":24,"id":"9f91af0f_74516962","line":8,"range":{"start_line":7,"start_character":36,"end_line":8,"end_character":14},"in_reply_to":"9f91af0f_204403b7","updated":"2018-01-04 01:21:46.000000000","message":"Yes, only the new ones. I\u0027ll update the text.","commit_id":"34f01ab5a5ecd33e55124c67d2af01fa47ff2a85"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"a4766f732ca7f9f91e016e121e9d78a6a60fe2f7","unresolved":false,"context_lines":[{"line_number":18,"context_line":"    Private keys can no longer be password protected, as PKCS12 does not"},{"line_number":19,"context_line":"    support storing a passphrase in an explicitly defined way. Note that this"},{"line_number":20,"context_line":"    is not noticeably less secure than storing a passphrase protected private"},{"line_number":21,"context_line":"    key in the same place as the passphrase."}],"source_content_type":"text/x-yaml","patch_set":24,"id":"9f91af0f_00221f01","line":21,"range":{"start_line":21,"start_character":33,"end_line":21,"end_character":43},"updated":"2018-01-03 21:05:23.000000000","message":"as was the case with barbican","commit_id":"34f01ab5a5ecd33e55124c67d2af01fa47ff2a85"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"0affd0a872c14126239f7b929b5162dddd50ff0d","unresolved":false,"context_lines":[{"line_number":18,"context_line":"    Private keys can no longer be password protected, as PKCS12 does not"},{"line_number":19,"context_line":"    support storing a passphrase in an explicitly defined way. Note that this"},{"line_number":20,"context_line":"    is not noticeably less secure than storing a passphrase protected private"},{"line_number":21,"context_line":"    key in the same place as the passphrase."}],"source_content_type":"text/x-yaml","patch_set":24,"id":"9f91af0f_d4c71512","line":21,"range":{"start_line":21,"start_character":33,"end_line":21,"end_character":43},"in_reply_to":"9f91af0f_00221f01","updated":"2018-01-04 01:21:46.000000000","message":"Done","commit_id":"34f01ab5a5ecd33e55124c67d2af01fa47ff2a85"}],"requirements.txt":[{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"ac4260e665952629f428390a1790c38e8339ba11","unresolved":false,"context_lines":[{"line_number":38,"context_line":"diskimage-builder!\u003d1.6.0,!\u003d1.7.0,!\u003d1.7.1,\u003e\u003d1.1.2 # Apache-2.0"},{"line_number":39,"context_line":"futures\u003e\u003d3.0;python_version\u003d\u003d\u00272.7\u0027 or python_version\u003d\u003d\u00272.6\u0027 # BSD"},{"line_number":40,"context_line":"castellan\u003e\u003d0.7.0 # Apache-2.0"},{"line_number":41,"context_line":"pyOpenSSL\u003e\u003d16.2.0 # Apache-2.0"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"#for the amphora api"},{"line_number":44,"context_line":"Flask!\u003d0.11,\u003c1.0,\u003e\u003d0.10 # BSD"}],"source_content_type":"text/plain","patch_set":4,"id":"1f2f7f8d_aec49741","line":41,"updated":"2017-09-19 08:10:46.000000000","message":"whoops, i\u0027m blind. removing in the next patch.","commit_id":"33dd0c772d9de8d6366f5533addd5d5273f0c74b"},{"author":{"_account_id":2245,"name":"Jacky Hu","email":"hudayou@hotmail.com","username":"hudayou"},"change_message_id":"ceabc1eb539553f51fcf2a6b7ec45f8487f7d3e0","unresolved":false,"context_lines":[{"line_number":38,"context_line":"taskflow\u003e\u003d2.7.0 # Apache-2.0"},{"line_number":39,"context_line":"diskimage-builder!\u003d1.6.0,!\u003d1.7.0,!\u003d1.7.1,\u003e\u003d1.1.2 # Apache-2.0"},{"line_number":40,"context_line":"futures\u003e\u003d3.0.0;python_version\u003d\u003d\u00272.7\u0027 or python_version\u003d\u003d\u00272.6\u0027 # BSD"},{"line_number":41,"context_line":"castellan\u003e\u003d0.14.0 # Apache-2.0"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"#for the amphora api"},{"line_number":44,"context_line":"Flask!\u003d0.11,\u003c1.0,\u003e\u003d0.10 # BSD"}],"source_content_type":"text/plain","patch_set":23,"id":"bf8cb3f7_d20a0289","line":41,"updated":"2017-12-21 00:45:30.000000000","message":"should be: castellan\u003e\u003d0.16.0","commit_id":"c8b3df7b8a23f978ba1dc7b2e30043e5c00b83ba"}]}