*** lyrrad has quit IRC | 00:25 | |
*** hrou has quit IRC | 04:46 | |
*** hrou has joined #swift3 | 04:49 | |
*** k1 has joined #swift3 | 14:22 | |
*** k1 has quit IRC | 14:29 | |
onovy | hi guys, anybody here for CVE-2015-8466 consultation? | 15:03 |
---|---|---|
*** lyrrad has joined #swift3 | 16:34 | |
*** bill_az has joined #swift3 | 17:02 | |
*** bill_az has quit IRC | 17:06 | |
*** bill_az has joined #swift3 | 17:08 | |
*** bill_az has quit IRC | 17:20 | |
*** bill_az has joined #swift3 | 17:30 | |
openstackgerrit | Merged openstack/swift3: Fix up some warnings https://review.openstack.org/294849 | 17:36 |
*** bill_az has quit IRC | 17:38 | |
timburke | whoo! thanks kota_! | 17:45 |
*** lyrrad has quit IRC | 17:59 | |
onovy | just want to know if i fixed it correctly inside older version of swift3 (1.7): http://anonscm.debian.org/cgit/openstack/swift-plugin-s3.git/commit/?h=debian/jessie&id=cae29deabbe2b6e4277a8ceefa5ee70d5ea0459e | 17:59 |
*** lyrrad has joined #swift3 | 18:03 | |
openstackgerrit | Merged openstack/swift3: Make Swift/Keystone logs available in gate results https://review.openstack.org/294782 | 18:06 |
*** bill_az has joined #swift3 | 18:29 | |
*** bill_az has quit IRC | 18:40 | |
*** bill_az has joined #swift3 | 18:47 | |
*** bill_az has quit IRC | 18:59 | |
*** bill_az has joined #swift3 | 19:01 | |
*** bill_az has quit IRC | 19:05 | |
*** bill_az has joined #swift3 | 19:09 | |
*** bill_az has quit IRC | 19:20 | |
*** bill_az has joined #swift3 | 19:46 | |
*** bill_az has quit IRC | 19:53 | |
kota_ | onovy: with my quick view, it looks correct. now I'm trying to make a func test for that, wait a moment. | 20:15 |
onovy | fix: http://anonscm.debian.org/cgit/openstack/swift-plugin-s3.git/commit/?h=debian/jessie&id=7cd18450a56c2304fb9247e6884b0d6dcf44fb70 | 20:15 |
onovy | exactly i don't know how to setup swift3 at all, if you can help me with it i can test this package and release it for debian-stable :) | 20:16 |
kota_ | alright | 20:16 |
kota_ | and I'm curious a bit because swift3 1.7 is too old one. | 20:17 |
onovy | yep, that's how debian stable works | 20:17 |
onovy | a will publish newer swift3 for jessie-backports, but backports is not for security fixies ;] | 20:17 |
kota_ | k | 20:19 |
onovy | ok, i have working saio+tempauth + installed swift3 | 20:27 |
onovy | swift -A http://127.0.0.1:8080/auth/v1.0 -U test:tester -K testing stat | 20:27 |
onovy | this is working | 20:27 |
onovy | how can i test swift3 auth? | 20:27 |
timburke | onovy: for tempauth, test:tester will be your access_key, and testing will be your secret_key (using boto's nomenclature) | 20:29 |
onovy | cli cmd? :) | 20:30 |
onovy | really: i'm not using, only packaging it | 20:30 |
kota_ | http://paste.openstack.org/show/495468/ | 20:33 |
kota_ | onovy:^^ | 20:33 |
kota_ | that may be a func test for the lack of date header. | 20:33 |
kota_ | like the paste, you can check the sanity by hand like... | 20:34 |
kota_ | connection = boto.ss3.connection.S3Connection(*snip*) | 20:35 |
kota_ | resp = connection.make_request('GET', headers={'Date':''}) | 20:36 |
kota_ | the resp should be 403 forbidden with the invalid date header message. | 20:36 |
*** bill_az has joined #swift3 | 20:41 | |
onovy | yep, 403 | 20:49 |
*** bill_az has quit IRC | 20:50 | |
onovy | kota_: http://paste.openstack.org/show/495470/ | 20:50 |
onovy | hm, but i'm getting 403 with 1.7 version without patch too :] | 20:52 |
*** bill_az has joined #swift3 | 20:58 | |
*** bill_az has quit IRC | 21:03 | |
onovy | sry, must go now | 21:11 |
kota_ | onovy: curious, maybe it's helpful you check the response body too | 22:56 |
kota_ | Sorry slow response, I'm at Openstack summit now. | 22:56 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!