veyepar: Managing internal PKI system at scale with Anchor

Hi user

Admin Login:

Name: Managing internal PKI system at scale with Anchor
--client lca --show lca2017 --room wellington_1 12073 --force
Next: 12 libtls: Rethinking the TLS/SSL API

show more... Marks

Author(s):	Stan Pitucha
Location	Wellington Room 1
Date	jan Thu 19	Days Raw Files
Start	18:35	First Raw Start	18:07
Duration	0:45:0	Offset	0:27:01
End	19:20	Last Raw End	19:21
Chapters	00:00 0:02:55 0:32:55
Total cuts_time	45 min.

http://linux.conf.au/schedule/presentation/97/
raw-playlist raw-mp4-playlist encoded-files-playlist host archive tweet mp4 svg png

final audio

assets release.pdf Managing_internal_PKI_system_at_scale_with_Anchor.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

Managing Public Key Infrastructure for internal systems is hard. Manual approvals, revocation lists, renewals are all more complicated than they should be.

I'd like to show the Anchor project created by HPE security to simplify the process for issuing certificates to services and systems. It's very different from the usual enterprise solutions and close to what Let's Encrypt has started recently. The main reasons behind creating Anchor were:

- revocation as it exists on the internet today doesn't really work
- certificate expiry / renewal is hard to manage and often forgotten
- existing PKI systems are huge and complicated
- OpenStack deployments needed TLS on every service without depending on big PKI system
- it provides configurable validation/authentication of requests without involving users

I'll explain how Anchor solves those and other issues.

Anchor is currently used in HP's Helion OpenStack project and is one of the official OpenStack security projects. It supports standard X509 and simple CMC requests. It also integrates easily with common authentication backends (local, keystone, ldap) and can sign certificates either locally or via PKCS11 interface (this includes keyrings, hardware security modules, etc.)

Comment:

production notes

recording sheet

recording sheet

2017-01-20/11_07_59.ts Apply: 18:07:59 - 18:23:42 ( 00:15:43 ) S: 18:07:59 - E: 18:37:58 D: 00:29:59 (End: 943.0) show more...

vlc ~/Videos/veyepar/lca/lca2017/dv/wellington_1/2017-01-20/11_07_59.ts :start-time=00.0 --audio-desync=0

	Raw File	Cut List
	18:07:59		seconds: 0.0 Wall: 18:07:59
Duration	00:29:59
	18:37:58		seconds: 943.0 Wall: 18:23:42
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2017-01-20/11_07_59.ts Apply: 18:23:42 - 18:35:03 ( 00:11:21 ) S: 18:07:59 - E: 18:37:58 D: 00:29:59 (Start: 943.0) (End: 1624.0) show more...

vlc ~/Videos/veyepar/lca/lca2017/dv/wellington_1/2017-01-20/11_07_59.ts :start-time=0943.0 --audio-desync=0

	Raw File	Cut List
	18:07:59		seconds: 943.0 Wall: 18:23:42
Duration	00:29:59
	18:37:58		seconds: 1624.0 Wall: 18:35:03
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2017-01-20/11_07_59.ts Apply: 18:35:03 - 18:37:58 ( 00:02:55 ) S: 18:07:59 - E: 18:37:58 D: 00:29:59 (Start: 1624.0) show more...

vlc ~/Videos/veyepar/lca/lca2017/dv/wellington_1/2017-01-20/11_07_59.ts :start-time=01624.0 --audio-desync=0

	Raw File	Cut List
	18:07:59		seconds: 1624.0 Wall: 18:35:03
Duration	00:29:59
	18:37:58		seconds: 0.0 Wall: 18:07:59
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2017-01-20/11_37_59.ts Apply: 18:37:59 - 19:07:59 ( 00:30:00 ) S: 18:37:59 - E: 19:07:59 D: 00:30:00 show more...

vlc ~/Videos/veyepar/lca/lca2017/dv/wellington_1/2017-01-20/11_37_59.ts :start-time=00.0 --audio-desync=0

	Raw File	Cut List
	18:37:59		seconds: 0.0 Wall: 18:37:59
Duration	00:30:00
	19:07:59		seconds: 0.0 Wall: 18:37:59
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2017-01-20/12_07_59.ts Apply: 19:07:59 - 19:20:26 ( 00:12:27 ) S: 19:07:59 - E: 19:21:01 D: 00:13:02 (End: 747.0) show more...

vlc ~/Videos/veyepar/lca/lca2017/dv/wellington_1/2017-01-20/12_07_59.ts :start-time=00.0 --audio-desync=0

	Raw File	Cut List
	19:07:59		seconds: 0.0 Wall: 19:07:59
Duration	00:13:02
	19:21:01		seconds: 747.0 Wall: 19:20:26
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2017-01-20/12_07_59.ts Apply: 19:20:26 - 19:21:01 ( 00:00:35 ) S: 19:07:59 - E: 19:21:01 D: 00:13:02 (Start: 747.0) show more...

vlc ~/Videos/veyepar/lca/lca2017/dv/wellington_1/2017-01-20/12_07_59.ts :start-time=0747.0 --audio-desync=0

	Raw File	Cut List
	19:07:59		seconds: 747.0 Wall: 19:20:26
Duration	00:13:02
	19:21:01		seconds: 0.0 Wall: 19:07:59
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

Rf filename:

root is .../show/dv/location/, example: 2013-03-13/13:13:30.dv

Sequence:

get this:

check and save to add this

2017-01-20/11_07_59.ts
audio viz

audio viz

2017-01-20/11_37_59.ts
audio viz

audio viz

2017-01-20/12_07_59.ts
audio viz

audio viz

Veyepar Video Eyeball Processor and Review