Re: Security Policy was: Query regarding where to store encryption keys

2012-07-01 Thread John Kinsella
t; >> Thanks. >> >> -Clement >> >> -Original Message----- >> From: David Nalley [mailto:da...@gnsa.us] >> Sent: Friday, June 29, 2012 10:44 AM >> To: cloudstack-dev@incubator.apache.org >> Subject: Security Policy was: Query regarding wher

Re: Security Policy was: Query regarding where to store encryption keys

2012-06-29 Thread John Kinsella
> Thanks. > > -Clement > > -Original Message- > From: David Nalley [mailto:da...@gnsa.us] > Sent: Friday, June 29, 2012 10:44 AM > To: cloudstack-dev@incubator.apache.org > Subject: Security Policy was: Query regarding where to store encryption keys > > I don&

RE: Security Policy was: Query regarding where to store encryption keys

2012-06-29 Thread Clement Chen
: cloudstack-dev@incubator.apache.org Subject: Security Policy was: Query regarding where to store encryption keys I don't want to lose track of this conversation. I think John's proposal makes a lot of sense. What is actionable out of this? --David On Fri, Jun 22, 2012 at 8:13 PM, Joh

Security Policy was: Query regarding where to store encryption keys

2012-06-29 Thread David Nalley
>> >> -Original Message- >> From: John Kinsella [mailto:j...@stratosec.co] >> Sent: Thursday, June 21, 2012 7:26 PM >> To: cloudstack-dev@incubator.apache.org >> Cc: Kelven Yang; Sateesh Chodapuneedi; Devdeep Singh >> Subject: Re: Query regarding whe

Re: Query regarding where to store encryption keys

2012-06-22 Thread John Kinsella
> -Original Message- > From: John Kinsella [mailto:j...@stratosec.co] > Sent: Thursday, June 21, 2012 7:26 PM > To: cloudstack-dev@incubator.apache.org > Cc: Kelven Yang; Sateesh Chodapuneedi; Devdeep Singh > Subject: Re: Query regarding where to store encryption keys >

RE: Query regarding where to store encryption keys

2012-06-22 Thread Clement Chen
ubator.apache.org Cc: Kelven Yang; Sateesh Chodapuneedi; Devdeep Singh Subject: Re: Query regarding where to store encryption keys OK - draft up at http://wiki.cloudstack.org/display/COMM/Draft%3A+Security+response+procedure I think out of the 3 below, I like the OS and Eucalyptus pages the most,

Re: Query regarding where to store encryption keys

2012-06-21 Thread John Kinsella
; Cc: Kelven Yang; Sateesh Chodapuneedi; Devdeep Singh > Subject: Re: Query regarding where to store encryption keys > > On Wed, Jun 20, 2012 at 3:50 PM, Ewan Mellor > wrote: >>> -Original Message- >>> From: David Nalley [mailto:da...@gnsa.us] >>&

RE: Query regarding where to store encryption keys

2012-06-20 Thread Vijayendra Bhamidipati
Hi John! Please see inline.. -Original Message- From: John Kinsella [mailto:j...@stratosec.co] Sent: Wednesday, June 20, 2012 12:47 PM To: cloudstack-dev@incubator.apache.org Subject: Re: Query regarding where to store encryption keys (sounds like Kishan has a direct answer, but I&#

RE: Query regarding where to store encryption keys

2012-06-20 Thread Vijayendra Bhamidipati
-Original Message- From: Kishan Kavala [mailto:kishan.kav...@citrix.com] Sent: Wednesday, June 20, 2012 12:32 PM To: 'cloudstack-dev@incubator.apache.org' Cc: Kelven Yang; Sateesh Chodapuneedi; Devdeep Singh Subject: RE: Query regarding where to store encryption keys >

Re: Query regarding where to store encryption keys

2012-06-20 Thread John Kinsella
> -Original Message- > From: David Nalley [mailto:da...@gnsa.us] > Sent: Wednesday, June 20, 2012 12:59 PM > To: cloudstack-dev@incubator.apache.org > Cc: Kelven Yang; Sateesh Chodapuneedi; Devdeep Singh > Subject: Re: Query regarding where to store encryption key

Re: Query regarding where to store encryption keys

2012-06-20 Thread John Kinsella
for how we should > handle these things? > > Ewan. > >> -Original Message- >> From: John Kinsella [mailto:j...@stratosec.co] >> Sent: Wednesday, June 20, 2012 1:10 PM >> To: cloudstack-dev@incubator.apache.org >> Subject: Re: Query regarding where to st

RE: Query regarding where to store encryption keys

2012-06-20 Thread Clement Chen
sh Chodapuneedi; Devdeep Singh >> Subject: Re: Query regarding where to store encryption keys >> >> On Wed, Jun 20, 2012 at 3:15 PM, Vijayendra Bhamidipati >> wrote: >> > Hi Team, >> > >> > This is with reference to bug CS-15151 >> (http://b

RE: Query regarding where to store encryption keys

2012-06-20 Thread Ewan Mellor
, June 20, 2012 1:10 PM > To: cloudstack-dev@incubator.apache.org > Subject: Re: Query regarding where to store encryption keys > > +1 :) > > On Jun 20, 2012, at 12:59 PM, David Nalley wrote: > > > On Wed, Jun 20, 2012 at 3:50 PM, Ewan Mellor > wrote: > >>>

Re: Query regarding where to store encryption keys

2012-06-20 Thread John Kinsella
ck-dev@incubator.apache.org >>> Cc: Kelven Yang; Sateesh Chodapuneedi; Devdeep Singh >>> Subject: Re: Query regarding where to store encryption keys >>> >>> On Wed, Jun 20, 2012 at 3:15 PM, Vijayendra Bhamidipati >>> wrote: >>>> Hi Team, &g

Re: Query regarding where to store encryption keys

2012-06-20 Thread David Nalley
ep Singh >> Subject: Re: Query regarding where to store encryption keys >> >> On Wed, Jun 20, 2012 at 3:15 PM, Vijayendra Bhamidipati >> wrote: >> > Hi Team, >> > >> > This is with reference to bug CS-15151 >> (http://bugs.cloudstack.org/browse/CS-1

RE: Query regarding where to store encryption keys

2012-06-20 Thread Ewan Mellor
> -Original Message- > From: David Nalley [mailto:da...@gnsa.us] > Sent: Wednesday, June 20, 2012 12:32 PM > To: cloudstack-dev@incubator.apache.org > Cc: Kelven Yang; Sateesh Chodapuneedi; Devdeep Singh > Subject: Re: Query regarding where to store encryption keys &

Re: Query regarding where to store encryption keys

2012-06-20 Thread John Kinsella
(sounds like Kishan has a direct answer, but I'm sending this in case it's of value from an appsec POV) On Jun 20, 2012, at 12:15 PM, Vijayendra Bhamidipati wrote: > Hi Team, > > This is with reference to bug CS-15151 > (http://bugs.cloudstack.org/browse/CS-15151). I have some questions and it

RE: Query regarding where to store encryption keys

2012-06-20 Thread Kishan Kavala
> -Original Message- > From: Vijayendra Bhamidipati [mailto:vijayendra.bhamidip...@citrix.com] > Sent: Wednesday, 20 June 2012 12:16 > To: 'cloudstack-dev@incubator.apache.org' > Cc: Kelven Yang; Sateesh Chodapuneedi; Devdeep Singh > Subject: Query regarding wh

Re: Query regarding where to store encryption keys

2012-06-20 Thread David Nalley
On Wed, Jun 20, 2012 at 3:15 PM, Vijayendra Bhamidipati wrote: > Hi Team, > > This is with reference to bug CS-15151 > (http://bugs.cloudstack.org/browse/CS-15151). I have some questions and it > would be great if you could share your knowledge and suggestions. > Why is that bug not publicly v

Query regarding where to store encryption keys

2012-06-20 Thread Vijayendra Bhamidipati
Hi Team, This is with reference to bug CS-15151 (http://bugs.cloudstack.org/browse/CS-15151). I have some questions and it would be great if you could share your knowledge and suggestions. We have a need to store credentials required to login to vCenter, so that that cloudstack management serv