diff -Nru python-castellan-1.2.0/AUTHORS python-castellan-1.2.2/AUTHORS --- python-castellan-1.2.0/AUTHORS 2019-02-18 21:51:13.000000000 +0000 +++ python-castellan-1.2.2/AUTHORS 2019-02-28 18:06:34.000000000 +0000 @@ -7,6 +7,7 @@ Brianna Poulos Chris Solis Christopher Solis +Corey Bryant Dai Dang Van Davanum Srinivas Dave McCowan @@ -29,6 +30,7 @@ Kiran_totad Michael McCune Moises Guimaraes de Medeiros +Moisés Guimarães de Medeiros Monty Taylor Nguyen Van Trung Niall Bunting diff -Nru python-castellan-1.2.0/castellan/key_manager/vault_key_manager.py python-castellan-1.2.2/castellan/key_manager/vault_key_manager.py --- python-castellan-1.2.0/castellan/key_manager/vault_key_manager.py 2019-02-18 21:48:52.000000000 +0000 +++ python-castellan-1.2.2/castellan/key_manager/vault_key_manager.py 2019-02-28 18:02:40.000000000 +0000 @@ -298,13 +298,18 @@ msg = _("User is not authorized to use key manager.") raise exception.Forbidden(msg) + if length % 8: + msg = _("Length must be multiple of 8.") + raise ValueError(msg) + key_id = uuid.uuid4().hex - key_value = os.urandom(length or 32) + key_value = os.urandom((length or 256) // 8) key = sym_key.SymmetricKey(algorithm, - length or 32, + length or 256, key_value, key_id, name or int(time.time())) + return self._store_key_value(key_id, key) def store(self, context, key_value, **kwargs): diff -Nru python-castellan-1.2.0/castellan.egg-info/pbr.json python-castellan-1.2.2/castellan.egg-info/pbr.json --- python-castellan-1.2.0/castellan.egg-info/pbr.json 2019-02-18 21:51:13.000000000 +0000 +++ python-castellan-1.2.2/castellan.egg-info/pbr.json 2019-02-28 18:06:34.000000000 +0000 @@ -1 +1 @@ -{"git_version": "feb4e1a", "is_release": true} \ No newline at end of file +{"git_version": "9a34dc9", "is_release": true} \ No newline at end of file diff -Nru python-castellan-1.2.0/castellan.egg-info/PKG-INFO python-castellan-1.2.2/castellan.egg-info/PKG-INFO --- python-castellan-1.2.0/castellan.egg-info/PKG-INFO 2019-02-18 21:51:13.000000000 +0000 +++ python-castellan-1.2.2/castellan.egg-info/PKG-INFO 2019-02-28 18:06:34.000000000 +0000 @@ -1,6 +1,6 @@ Metadata-Version: 1.1 Name: castellan -Version: 1.2.0 +Version: 1.2.2 Summary: Generic Key Manager interface for OpenStack Home-page: https://docs.openstack.org/castellan/latest/ Author: OpenStack diff -Nru python-castellan-1.2.0/castellan.egg-info/SOURCES.txt python-castellan-1.2.2/castellan.egg-info/SOURCES.txt --- python-castellan-1.2.0/castellan.egg-info/SOURCES.txt 2019-02-18 21:51:13.000000000 +0000 +++ python-castellan-1.2.2/castellan.egg-info/SOURCES.txt 2019-02-28 18:06:34.000000000 +0000 @@ -102,6 +102,7 @@ playbooks/devstack/run.yaml releasenotes/notes/add-vault-provider-29a4c19fe67ab51f.yaml releasenotes/notes/deprecate-auth-endpoint-b91a3e67b5c7263f.yaml +releasenotes/notes/fix-vault-create-key-b4340a3067cbd93c.yaml releasenotes/notes/support-legacy-fixed-key-id-9fa897b547111610.yaml releasenotes/notes/vault-approle-support-5ea04daea07a152f.yaml releasenotes/notes/vault-kv-mountpoint-919eb547764a0c74.yaml diff -Nru python-castellan-1.2.0/ChangeLog python-castellan-1.2.2/ChangeLog --- python-castellan-1.2.0/ChangeLog 2019-02-18 21:51:13.000000000 +0000 +++ python-castellan-1.2.2/ChangeLog 2019-02-28 18:06:34.000000000 +0000 @@ -1,6 +1,17 @@ CHANGES ======= +1.2.2 +----- + +* Set py3 tests according to Stein runtimes + +1.2.1 +----- + +* Fix length usage in VaultKeyManager.create\_key +* add python 3.7 unit test job + 1.2.0 ----- diff -Nru python-castellan-1.2.0/debian/changelog python-castellan-1.2.2/debian/changelog --- python-castellan-1.2.0/debian/changelog 2019-02-21 10:41:33.000000000 +0000 +++ python-castellan-1.2.2/debian/changelog 2019-03-11 19:50:40.000000000 +0000 @@ -1,8 +1,14 @@ -python-castellan (1.2.0-0ubuntu1~cloud0) bionic-stein; urgency=medium +python-castellan (1.2.2-0ubuntu1~cloud0) bionic-stein; urgency=medium * New upstream release for the Ubuntu Cloud Archive. - -- Openstack Ubuntu Testing Bot Thu, 21 Feb 2019 10:41:33 +0000 + -- Openstack Ubuntu Testing Bot Mon, 11 Mar 2019 19:50:40 +0000 + +python-castellan (1.2.2-0ubuntu1) disco; urgency=medium + + * New upstream release for OpenStack Stein. + + -- Corey Bryant Mon, 11 Mar 2019 14:08:16 -0400 python-castellan (1.2.0-0ubuntu1) disco; urgency=medium diff -Nru python-castellan-1.2.0/PKG-INFO python-castellan-1.2.2/PKG-INFO --- python-castellan-1.2.0/PKG-INFO 2019-02-18 21:51:13.000000000 +0000 +++ python-castellan-1.2.2/PKG-INFO 2019-02-28 18:06:34.000000000 +0000 @@ -1,6 +1,6 @@ Metadata-Version: 1.1 Name: castellan -Version: 1.2.0 +Version: 1.2.2 Summary: Generic Key Manager interface for OpenStack Home-page: https://docs.openstack.org/castellan/latest/ Author: OpenStack diff -Nru python-castellan-1.2.0/releasenotes/notes/fix-vault-create-key-b4340a3067cbd93c.yaml python-castellan-1.2.2/releasenotes/notes/fix-vault-create-key-b4340a3067cbd93c.yaml --- python-castellan-1.2.0/releasenotes/notes/fix-vault-create-key-b4340a3067cbd93c.yaml 1970-01-01 00:00:00.000000000 +0000 +++ python-castellan-1.2.2/releasenotes/notes/fix-vault-create-key-b4340a3067cbd93c.yaml 2019-02-28 18:02:40.000000000 +0000 @@ -0,0 +1,10 @@ +--- +fixes: + - | + Fixed VaultKeyManager.create_key() to consider the `length` param as bits + instead of bytes for the key length. This was causing a discrepancy between + keys generated by the HashiCorp Vault backend and the OpenStack Barbican + backend. Considering `km` as an instance of a key manager, the following + code `km.create_key(ctx, "AES", 256)` was generating a 256 bit AES key when + Barbican is configured as the backend, but generating a 2048 bit AES key + when Vault was configured as the backend. diff -Nru python-castellan-1.2.0/tox.ini python-castellan-1.2.2/tox.ini --- python-castellan-1.2.0/tox.ini 2019-02-18 21:48:52.000000000 +0000 +++ python-castellan-1.2.2/tox.ini 2019-02-28 18:02:40.000000000 +0000 @@ -1,6 +1,6 @@ [tox] minversion = 2.0 -envlist = py35,py27,pep8 +envlist = py36,py27,pep8 skipsdist = True [testenv] diff -Nru python-castellan-1.2.0/.zuul.yaml python-castellan-1.2.2/.zuul.yaml --- python-castellan-1.2.0/.zuul.yaml 2019-02-18 21:48:52.000000000 +0000 +++ python-castellan-1.2.2/.zuul.yaml 2019-02-28 18:02:40.000000000 +0000 @@ -61,8 +61,8 @@ - check-requirements - openstack-lower-constraints-jobs - openstack-python-jobs - - openstack-python35-jobs - openstack-python36-jobs + - openstack-python37-jobs - periodic-stable-jobs - publish-openstack-docs-pti - release-notes-jobs-python3