Christian Grothoff
3a1f418603
improve URI path checking, make it more strict and simplify logic
2022-03-04 22:29:29 +01:00
d0b27833b2
[age restriction] added unit test for get_age_group
2022-03-04 17:00:28 +01:00
Marco Boss
f5e1cf5e6d
rewrite query for recoup_by_reserve
2022-03-04 13:22:28 +01:00
Christian Grothoff
f9a2808ed0
-fix kyc test
2022-03-04 00:30:43 +01:00
Christian Grothoff
1643b745af
use 32 byte hash for hpayto, use that for joins on queries to better align queries with partitions
2022-03-03 23:52:08 +01:00
Christian Grothoff
f951cdef8c
include shard when marking deposits tiny/done to make better use of partitions/shards
2022-03-03 19:39:25 +01:00
4c53d42e44
[age restriction] progress 18/n - attestation tested
...
- Unit-tests for commit, derive, attest and verify added, with multiple
combinations of minimum age and commited age.
- Fixed crypto implementation (eddsa -> ecdsa)
- Using now standard functionality from GNUNET:
GNUNET_CRYPTO_ecdsa_{private,public}_key_derive
All tests pass (unit tests in util/ and 'make check' in testing).
2022-03-03 19:35:24 +01:00
Christian Grothoff
476ae53808
simply defer all, only way to do well with partitions
2022-03-03 17:48:00 +01:00
Thien-Thi Nguyen
80fc8231ad
Don't hardcode directory in taler-auditor-sync(1) invocation
2022-03-02 17:32:52 -05:00
Marco Boss
57e3864c09
Include partitioning in dbinit
2022-03-02 19:03:54 +01:00
Marco Boss
79d123d1b4
fix num partitions
2022-03-02 19:01:27 +01:00
Marco Boss
7f30609ff0
use plain uint32_t
2022-03-02 17:22:43 +01:00
Marco Boss
548613c617
fix
2022-03-02 13:30:44 +01:00
Marco Boss
41a9a73eb8
fix
2022-03-02 13:21:45 +01:00
10d7d93ad8
-tests now with age restriction
2022-03-02 11:59:21 +01:00
Marco Boss
cab654237f
clearer doc
2022-03-02 11:28:28 +01:00
7624db4efd
-refactor TALER_AgeMask.mask -> TALER_AgeMask.bits
...
also: fix off-by-one in TALER_age_restriction_commit
2022-03-02 10:59:42 +01:00
Marco Boss
2abe9bf6d7
include partitioning logic in dbinit
2022-03-02 10:50:51 +01:00
4978b1e966
-amend missing parts to commit b20ddf0c8
...
- functions TALER_age_commitment_attest and
TALER_age_commitment_verify
implemented.
- age restriction implementation moved into util/age_restriction.c
2022-03-02 07:58:55 +01:00
b20ddf0c8a
[age restriction] progress 17/n - attestation implemented
...
- functions TALER_age_commitment_attest and TALER_age_commitment_verify
implemented.
- age restriction implementation moved into util/age_restriction.c
2022-03-01 19:30:57 +01:00
e9eb00e285
Refactoring TALER_AgeCommitment
...
Instead of a single struct TALER_AgeCommitment, we now use
1. TALER_AgeCommitment for the age mask and list public keys for age
restriciton.
2. TALER_AgeProof for list of private keys for age restriction
3. TALER_AgeCommitmentProof for the aggregation of the former two.
Also, we introduce TALER_AgeAttestation as the EDDSA signature to attest
a particular age group, along with the function prototypes
TALER_age_commitment_attest and TALER_age_commitment_verify.
2022-03-01 17:02:37 +01:00
Marco Boss
b4f7fef224
stay with partitions for now - find shards on dev/boss/sharding
2022-03-01 15:54:47 +01:00
Marco Boss
0eed0c0de2
tested shard creation locally
2022-03-01 14:01:42 +01:00
Marco Boss
afb1b5f902
prepare sharding / partitioning init
...
- create exchange-0001.sql with functions to create all tables and partitions / shards
- create exchange-0002.sql for the master db
2022-03-01 12:11:58 +01:00
Christian Grothoff
e24a6369aa
test-sync passes again
2022-02-28 23:18:40 +01:00
Christian Grothoff
a8d9e7e0a6
-more bool cleanup
2022-02-28 22:46:24 +01:00
Christian Grothoff
3d4e580699
work on auditor-sync update to latest DB
2022-02-28 22:41:24 +01:00
Christian Grothoff
ee79f31275
-work on test_sync.sh, incomplete
2022-02-28 22:41:24 +01:00
Marco Boss
0efc7fd524
cleaner sql
2022-02-28 22:32:59 +01:00
Christian Grothoff
23bc09fe3c
get test-auditor and #7181 to pass
2022-02-28 20:37:19 +01:00
Christian Grothoff
8f77bda2e0
-towards getting auditor tests to pass again with new logic
2022-02-28 16:13:30 +01:00
Christian Grothoff
d7bbf934a0
make DB generation work with new CS logic
2022-02-28 16:13:30 +01:00
Marco Boss
58eb3d95fc
towards adding shard/partitioning init functionality
2022-02-27 21:23:20 +01:00
Marco Boss
99dd36f7f6
add index on wire_targets
...
- better performance on local db
- many queries use wire_target_serial_id as join condition -> discussion use this as shard key?
2022-02-26 17:37:52 +01:00
Christian Grothoff
f11cab90ff
-add parens
2022-02-24 23:58:17 +01:00
Marco Boss
3d52f52164
Fix ON CONFLICT statements for distributed tables
2022-02-24 14:31:19 +01:00
Christian Grothoff
fd9ba53c49
make_coin_known can experience serialization failures, add retry logic
2022-02-24 13:53:19 +01:00
Christian Grothoff
10b9023575
-on conflict example
2022-02-24 10:16:10 +01:00
Christian Grothoff
5e5004020e
-fix aggregator with deferred constraint
2022-02-24 10:06:43 +01:00
Christian Grothoff
e253a5b055
-unique constraint is crucial
2022-02-24 09:06:15 +01:00
b244e23859
-make age commiment structs const in traits
2022-02-23 16:08:27 +01:00
7910ca183f
double melt test no works with age restriction
...
- added missing field h_age_commitment in exchange's error response
- slight refactoring
2022-02-22 18:35:10 +01:00
Christian Grothoff
fbdc1996a6
-use correct idx
2022-02-22 17:28:44 +01:00
Christian Grothoff
900b2d6fd9
-use correct idx
2022-02-22 17:26:27 +01:00
26158fc725
[age restriction] progress 16/n - refresh/reveal/link tests
...
Age restriction works now with withdraw, melt/refresh/reveal and link,
including tests.
However, there is still a problem with the tests: The melting operation
"refresh-melt-failing-age" that should fail (because of conflict), but
currently fails for other reasons. I decided to disable that particular
test (and the next) and submit the patch I have so far.
2022-02-22 14:34:47 +01:00
3cd6156513
do not clamp EdDSA private keys
2022-02-21 16:08:45 +01:00
Christian Grothoff
544ba42f44
-big renaming of structs for consistent naming with P suffix
2022-02-21 00:23:23 +01:00
Christian Grothoff
19624fd776
-ensure different HKDF is used in melt vs. withdraw
2022-02-20 21:51:46 +01:00
Christian Grothoff
bc150693de
-work around missing constraint, if not present
2022-02-20 19:26:01 +01:00
Thien-Thi Nguyen
e02c850acf
add libtalerextensions.la to _LDADD (two instances)
...
* src/benchmark/Makefile.am (taler_bank_benchmark_LDADD): ...here.
* src/exchange-tools/Makefile.am (taler_auditor_offline_LDADD): Likewise.
2022-02-19 21:36:08 -05:00
Christian Grothoff
bc3ec56373
reject wire deadline of 'never' ( #7157 )
2022-02-19 21:26:27 +01:00
Christian Grothoff
bccdf7e452
-reduce default fakebank memory allocation (see #7156 )
2022-02-19 21:21:24 +01:00
71af4c539e
-reducing FIXMEs re: age restriction
...
- deposit info now carries h_age_commitment
- benchmark does age commitment, too
2022-02-18 02:07:38 +01:00
f4f502d037
-minor merge conflict resolves
2022-02-18 00:50:31 +01:00
a78b3345fb
[age restriction] progress 15/n - melt/refresh/reveal and recoup
...
Added age restriction support for
- melt/refresh/reveal
- recoup
However, tests are not yet implemented for those flows.
Also: minor fixes and refactoring.
2022-02-18 00:30:19 +01:00
Christian Grothoff
22fe5da700
-migrate to Postgress 11: use BIGINT GENERATED BY DEFAULT AS IDENTITY instead of BIGSERIAL
2022-02-17 23:08:34 +01:00
Christian Grothoff
d380ff1ffe
-restore fee structure
2022-02-17 19:02:55 +01:00
Christian Grothoff
802f4986fe
-fix Oec FTBFS
2022-02-17 15:29:50 +01:00
Christian Grothoff
f74757e234
-another OEC FIXME
2022-02-17 15:28:00 +01:00
Christian Grothoff
721c2c88d5
-use age_mask
2022-02-17 15:23:56 +01:00
Christian Grothoff
668342cd41
-fix test_crypto FTBFS
2022-02-17 15:23:05 +01:00
Christian Grothoff
81bf3ebeb4
-fix bad choice during merge
2022-02-17 15:19:05 +01:00
Christian Grothoff
5147993785
-add missing file
2022-02-17 15:18:12 +01:00
Christian Grothoff
a351bfc4b4
-fix CS nonce reuse check logic
2022-02-17 15:18:09 +01:00
8bdf6ab19d
[age restriction] progress 14/n - withdraw and deposit
...
Age restriction support for
- withdraw is done and tested
- deposit is done and tested
TODOs:
- melt/refresh/reveal
- link
------
Added functions
- TALER_age_restriction_commit
- TALER_age_commitment_derive
- TALER_age_commitment_hash
- TALER_age_restriction_commitment_free_inside
- Hash of age commitment passed around API boundaries
Exchangedb adjustments for denominations
- all prepared statements re: denominations now handle age_mask
- signature parameters adjusted
Hash and signature verification of /keys adjusted
- Hashes of (normal) denominations and age-restricted denominations are
calculated seperately
- The hash of the age-restricted ones will then be added to the other
hash
- The total hash is signed/verified
Tests for withdraw with age restriction added
- TALER_EXCHANGE_DenomPublickey now carries age_mask
- TALER_TESTING_cmd_withdraw_amount* takes age parameter
- TALER_TESTING_find_pk takes boolean age_restricted
- WithdrawState carries age_commitment and its hash
- withdraw_run derives new age commitment, if applicable
- Added age parameter to testing (13 as example)
Various Fixes and changes
- Fixes of post handler for /management/extensions
- Fixes for offline tool extensions signing
- Slight refactoring of extensions
- Age restriction extension simplified
- config is now global to extension
- added global TEH_age_restriction_enabled and TEH_age_mask in
taler-exchange-httpd
- helper functions and macros introduced
2022-02-16 22:01:05 +01:00
Christian Grothoff
ef938e0f7a
-correctly implement CS idempotency check on withdraw
2022-02-15 17:07:13 +01:00
Christian Grothoff
8ecbdeb55b
-actually, commit phase does take care of this
2022-02-14 23:15:29 +01:00
Christian Grothoff
bd77bcb52d
-towards fixing the protocol
2022-02-14 23:02:25 +01:00
Christian Grothoff
f4f40a31ef
-fixmes
2022-02-14 13:03:26 +01:00
Christian Grothoff
9b8c350d4d
-remove redundancies in the refresh-melt computation and fix uninitialized bks return value
2022-02-13 12:44:09 +01:00
Christian Grothoff
f6ecf7458a
-refactor melt API, add FIXME for discovered bug
2022-02-12 14:38:27 +01:00
Christian Grothoff
7cedf3f0bf
-clean up refresh reveal API
2022-02-12 14:00:58 +01:00
Christian Grothoff
4d26042b5a
-modify link API to return 'ps' so that linked coins can be refreshed
2022-02-12 13:39:58 +01:00
Christian Grothoff
730d8c893c
-more doxygen fixes
2022-02-12 12:35:03 +01:00
Christian Grothoff
d81b3f13d1
-remove legacy uncrustify workaround
2022-02-12 12:21:27 +01:00
Christian Grothoff
a0d9d59b73
-refactor to address FIXME
2022-02-12 12:20:12 +01:00
Christian Grothoff
88033aa15e
-removed confused TODOs
2022-02-12 12:15:02 +01:00
Christian Grothoff
d581729443
-removed confused TODOs
2022-02-12 12:14:24 +01:00
Christian Grothoff
db8cdc8c4c
-remove addessed documentation FIXMEs
2022-02-12 12:10:33 +01:00
Christian Grothoff
ea4be7ba6f
-swap argument/rval for nicer code
2022-02-12 11:42:25 +01:00
Christian Grothoff
8a3e88fbf1
-add missing comment
2022-02-12 11:27:57 +01:00
Christian Grothoff
c2549e8b1e
-address FIXMEs
2022-02-12 11:24:32 +01:00
Christian Grothoff
bc14c215b3
-doxygen fixes
2022-02-12 11:12:33 +01:00
Christian Grothoff
819b67426c
-doxygen fixes
2022-02-12 10:33:23 +01:00
Christian Grothoff
2cdbf58006
-remove redundant comments
2022-02-12 10:05:45 +01:00
Christian Grothoff
c93150b8cd
-work on more FIXMEs
2022-02-12 01:00:31 +01:00
Christian Grothoff
94a5359494
-address misc. fixmes
2022-02-12 00:52:19 +01:00
Christian Grothoff
3b1e742dde
-simplify: nonce no longer hashed
2022-02-11 18:00:20 +01:00
Christian Grothoff
9f77398fe2
-fix use of uninit memory in test
2022-02-11 17:44:18 +01:00
Christian Grothoff
0eb5b08d50
-minor API clean up
2022-02-11 17:05:57 +01:00
Christian Grothoff
2772050b95
-add missing cfg file
2022-02-11 12:23:57 +01:00
Christian Grothoff
4472cbaf9d
-simplify structures
2022-02-11 11:55:59 +01:00
Christian Grothoff
3b9d67a6f8
-get twisted tests to pass
2022-02-11 11:46:42 +01:00
Christian Grothoff
0995bdd1d0
-get tests to pass
2022-02-11 09:36:01 +01:00
Christian Grothoff
532d4ad0dc
-fixes to tests, and half-baked fixes for CS-/link (still fails)
2022-02-10 23:39:00 +01:00
Christian Grothoff
d58d89dcab
-get recoup/refresh to pass
2022-02-10 20:15:17 +01:00
Christian Grothoff
ed5ef2b5f7
also pass ewvs during recoup-refresh
2022-02-09 22:05:10 +01:00
Christian Grothoff
025922950d
pass exchange values to /recoup
2022-02-09 22:02:29 +01:00
Christian Grothoff
e6598cfa1a
-get refresh to work
2022-02-09 21:25:57 +01:00
Christian Grothoff
758f13b557
-fix error handling
2022-02-09 19:28:34 +01:00
Christian Grothoff
008ba5cf89
implement CS refresh-reveal signing, simplify TEH keys logic
2022-02-09 19:24:29 +01:00
Christian Grothoff
8e4eaabc96
-fix refresh commitment check for CS
2022-02-09 19:17:50 +01:00
Christian Grothoff
4ee82c1ed3
-fix init of nonces in reveal request
2022-02-09 18:42:16 +01:00
Christian Grothoff
730f9e8865
-more refresh CS fixes
2022-02-09 17:30:02 +01:00
Christian Grothoff
1777db292e
-fix withdraw logic
2022-02-09 16:43:36 +01:00
Christian Grothoff
d05c561e4f
-fix fTBFS
2022-02-09 15:33:20 +01:00
Christian Grothoff
12290af845
-clean up crypto
2022-02-09 10:49:10 +01:00
Christian Grothoff
d559610da7
-poison
2022-02-09 10:38:02 +01:00
Christian Grothoff
77eaa685b9
-indent
2022-02-09 10:11:40 +01:00
Christian Grothoff
88b84d01cb
-simpilify
2022-02-09 10:09:01 +01:00
Christian Grothoff
b461fc6fc4
-simpilify
2022-02-09 10:03:10 +01:00
Christian Grothoff
e82d18325a
-dce
2022-02-09 10:02:10 +01:00
Christian Grothoff
bc15478c3b
-fix leak
2022-02-09 09:25:32 +01:00
Christian Grothoff
c3e1aa36ee
-fix leak
2022-02-09 09:19:56 +01:00
Christian Grothoff
dfc5039d9a
-fix leak
2022-02-09 09:18:35 +01:00
Christian Grothoff
bd930549fb
initialize reserved field
2022-02-09 09:13:40 +01:00
Christian Grothoff
cb723a82fd
-initialize cipher type
2022-02-08 23:25:16 +01:00
Christian Grothoff
6cbf7218d8
patch from Lucien
2022-02-08 22:58:12 +01:00
Christian Grothoff
b3cf788424
-more test fixes
2022-02-08 14:02:27 +01:00
Christian Grothoff
8cbe16a220
fix refresh/link tests
2022-02-08 09:58:22 +01:00
Christian Grothoff
133cf76f0d
use 'NULL'
2022-02-08 00:15:15 +01:00
Christian Grothoff
7eb989b2df
-get melt and refresh-reveal to pass again
2022-02-08 00:12:56 +01:00
Christian Grothoff
17a30cbd70
-cleanups
2022-02-07 23:38:30 +01:00
Christian Grothoff
e27ff05e63
-fix config file name
2022-02-07 22:01:37 +01:00
Christian Grothoff
a8b683fe3f
only one helper must be OK
2022-02-07 21:55:07 +01:00
Christian Grothoff
b79457cec6
-style fixes
2022-02-07 21:45:40 +01:00
Christian Grothoff
a5b8244948
-wake clients if we have 0 dks
2022-02-07 15:40:21 +01:00
Christian Grothoff
271711ae64
run denom helper even with zero denoms, as we may be using the other cipher type only
2022-02-07 15:02:34 +01:00
Christian Grothoff
ca7fa98016
-fix config file names
2022-02-07 14:53:32 +01:00
Christian Grothoff
e35e89f14d
-fix FTBFS
2022-02-07 13:43:29 +01:00
Christian Grothoff
b84fb618c3
fix refreshes_reveal FTBFS
2022-02-07 13:41:55 +01:00
Christian Grothoff
169d684342
-towards CS in refresh (incomplete, FTBFS)
2022-02-07 13:23:20 +01:00
Christian Grothoff
b2e6fcae1a
fix DB API for generic blinded planchet storage
2022-02-07 13:14:25 +01:00
Christian Grothoff
b9ea075d61
get DB test to build
2022-02-07 12:42:27 +01:00
Christian Grothoff
c7c0beedd5
-rename fest
2022-02-07 12:35:00 +01:00
Christian Grothoff
fb9ba5b1d2
-rename fest
2022-02-07 12:33:35 +01:00
Christian Grothoff
0d03f55282
-clean up of crypto.c
2022-02-07 11:33:58 +01:00
Christian Grothoff
d850ed9ca1
-fix test_crypto
2022-02-07 11:23:53 +01:00
Christian Grothoff
f7a1f41eee
-get testing to build
2022-02-07 11:01:54 +01:00
Christian Grothoff
3ed39955b6
-fix test_crypto ftbfs
2022-02-07 10:58:23 +01:00
Christian Grothoff
031e365814
fix FTBFS of main logic
2022-02-07 10:55:07 +01:00
Christian Grothoff
2164c36f0f
got testing_api_cmd_refresh to compile
2022-02-07 10:09:12 +01:00
Christian Grothoff
5ff3189075
-fix recoup testing cmds
2022-02-06 20:04:36 +01:00
Christian Grothoff
62d8368b1b
-fix more FTBFS issues
2022-02-06 19:53:23 +01:00
Christian Grothoff
66abbcac3f
-fix more FTBFS issues
2022-02-06 19:44:05 +01:00
Christian Grothoff
e735475623
-work on refresh_common FTBFS
2022-02-06 19:00:01 +01:00
Christian Grothoff
f173296c3c
-fix refresh FTBFS
2022-02-06 18:39:28 +01:00
Christian Grothoff
57bbdb0997
-fix melt FTBFS
2022-02-06 18:35:08 +01:00
Gian Demarmels
34a7f59060
fixed src util and other stuff
2022-02-05 23:42:17 +01:00
Gian Demarmels
9fc3b7a278
Merge branch 'master' of ssh://git.taler.net/exchange
2022-02-05 23:12:31 +01:00
Gian Demarmels
b280b1db04
fix src/util
2022-02-05 23:12:21 +01:00
Lucien Heuzeveldt
251f2b5987
implement csr max request elements
2022-02-05 22:46:36 +01:00
Lucien Heuzeveldt
5a47863caf
implemenent flexible csr http endpoint
2022-02-05 22:16:00 +01:00
Christian Grothoff
718ad3996f
-FTBFS
2022-02-05 20:40:39 +01:00
Gian Demarmels
e8740316a7
fixes to crypto.c changes
2022-02-05 20:22:55 +01:00
Christian Grothoff
41d132757b
-implement new client-side csr logic
2022-02-05 17:06:42 +01:00
Gian Demarmels
f46dc9ea5e
Merge branch 'master' of ssh://git.taler.net/exchange
2022-02-05 00:33:16 +01:00
Gian Demarmels
c42376cf40
crypto implementation
2022-02-05 00:32:53 +01:00
Christian Grothoff
aea7fc36c3
-style fix
2022-02-05 00:13:51 +01:00
Christian Grothoff
d81a6c7cf2
-work on reveal
2022-02-05 00:12:58 +01:00
Christian Grothoff
41acdf11b8
make API actually workable, sketch out melt
2022-02-05 00:02:38 +01:00
Christian Grothoff
b30765c7d0
make API actually workable, sketch out melt
2022-02-04 23:58:41 +01:00
Christian Grothoff
cfc6c3fcd0
make API actually workable:
2022-02-04 23:09:19 +01:00
Christian Grothoff
d833966d52
-API work
2022-02-04 22:02:48 +01:00
Christian Grothoff
bd5a25aff2
-fix comment
2022-02-04 21:20:26 +01:00
Christian Grothoff
57dc3cd232
new API
2022-02-04 21:12:54 +01:00
Christian Grothoff
ed136c1f2d
sync
2022-02-04 20:02:16 +01:00
Gian Demarmels
30c92a9b9e
Merge branch 'master' of ssh://git.taler.net/exchange
2022-02-04 19:50:40 +01:00
Gian Demarmels
752c0aca43
uncrustify
2022-02-04 19:50:21 +01:00
Gian Demarmels
37f54d3e5d
exchangedb fix
2022-02-04 19:50:12 +01:00
Christian Grothoff
03fd154a69
messing with CS/RSA fixes
2022-02-04 19:30:15 +01:00
Lucien Heuzeveldt
7d2a1a596a
split .conf files into rsa and cs
2022-02-04 19:24:30 +01:00
Christian Grothoff
9d40bd5a1e
split tests by rsa/cs
2022-02-04 18:45:42 +01:00
Gian Demarmels
a67786078b
resolves merge conflicts
2022-02-04 16:50:32 +01:00
Gian Demarmels
8674f32aec
denomination CIPHER field per denom
2022-02-04 15:39:57 +01:00
Gian Demarmels
086cf05794
refactor TALER_coin_ev_hash
2022-02-04 15:37:34 +01:00
Gian Demarmels
2213012866
include denom_pub into coin_ev_hash
2022-02-04 15:37:34 +01:00
Gian Demarmels
be50c084f8
fixed nonce check, renamed WithdrawNonce
2022-02-04 15:37:33 +01:00
Gian Demarmels
ae5f082c75
repair nonce check
2022-02-04 15:37:33 +01:00
Gian Demarmels
bcc159de17
introduce new type for security module pubkeys
2022-02-04 15:37:32 +01:00
Christian Grothoff
3510f953b0
-make picky gcc happy
2022-02-04 15:37:32 +01:00
Lucien Heuzeveldt
8d85c8b5b6
implement feedback
2022-02-04 15:37:30 +01:00
Christian Grothoff
ea97729ba8
-scope needed
2022-02-04 15:36:51 +01:00
Lucien Heuzeveldt
74ce114b83
change TEH_keys_denomination_sign message parameter
2022-02-04 15:36:48 +01:00
Gian Demarmels
5b7e8f9ac5
refactoring
2022-02-04 15:36:11 +01:00
Lucien Heuzeveldt
daa7fdcfb1
implement spend
2022-02-04 15:36:10 +01:00
Gian Demarmels
9c2aefaa51
removed varargs
2022-02-04 15:36:08 +01:00
Lucien Heuzeveldt
9074e66ebc
implement withdraw (nonce reuse check missing)
2022-02-04 15:35:31 +01:00
Gian Demarmels
4c7aa09784
cleanup
2022-02-04 15:34:22 +01:00
Gian Demarmels
2d70c8c6d0
secmod CS sign implementation
2022-02-04 15:34:21 +01:00
Lucien Heuzeveldt
82405b0ce5
implement CS key handling and csr endpoint
2022-02-04 15:34:19 +01:00
Lucien Heuzeveldt
36f551ff33
set planchet detail cipher, add cipher checks
2022-02-04 15:33:14 +01:00
Lucien Heuzeveldt
106664ed0c
implement TALER_CRYPTO_helper_cs_r_derive and related tests
2022-02-04 15:33:13 +01:00
Lucien Heuzeveldt
875a8b397e
implement secmod cs derive R
2022-02-04 15:33:13 +01:00
Gian Demarmels
d1fd3a485b
revocation
2022-02-04 15:33:13 +01:00
Gian Demarmels
9d9d4413df
setup_key for cs secmod helper
2022-02-04 15:33:12 +01:00
Gian Demarmels
18db69be2d
initial cs_secmod implementation
2022-02-04 15:33:11 +01:00
Gian Demarmels
f239b01be1
secmod cs signatures implementation
2022-02-04 15:33:11 +01:00
Lucien Heuzeveldt
fbb6d03f69
fix const due to changes in TALER_planchet_prepare
2022-02-04 15:33:10 +01:00
Lucien Heuzeveldt
75eff1524a
clean up cs implementation
2022-02-04 15:33:10 +01:00
Lucien Heuzeveldt
cf4fd36cc4
remove varargs in cs crypto implementation
2022-02-04 15:33:09 +01:00
Gian Demarmels
4bcbd704df
utility functions
2022-02-04 15:33:09 +01:00
Gian Demarmels
ca247f6f58
fixed CS signatures and cleanup/refactoring
2022-02-04 15:33:09 +01:00
Lucien Heuzeveldt
3225566c93
implement exchange_api_csr
2022-02-04 15:33:07 +01:00
Gian Demarmels
db9b84970d
add sign and verify implementation
2022-02-04 15:31:50 +01:00
Gian Demarmels
5d2157a8f6
sign_blinded implementation
2022-02-04 15:31:49 +01:00
Gian Demarmels
f1ec1e70a0
implemented planchet_prepare for CS
2022-02-04 15:31:49 +01:00
Gian Demarmels
a02ab8f81b
added CS get R functionality and planchet setup
2022-02-04 15:31:48 +01:00
Gian Demarmels
385eb51e93
CS planchet create and withdraw create
2022-02-04 15:31:48 +01:00
Gian Demarmels
f3fb7c29e6
added CS data structures, implemented CS keypair
2022-02-04 15:31:45 +01:00
e6e0cabf08
test and hopefully fix JSON canonicalization
2022-01-27 20:25:40 +01:00
32f1276b8c
fix RFC 8785 JSON normalization
2022-01-27 15:29:55 +01:00
8684a9bfea
[age_restriction] progress 13/n
...
- major refactoring of extensions
- extensions live now in a separate library, libtalerextensions
- refactored all components using age_restriction accordingly
- plumbing for plugin support for extensions roughly layed down
2022-01-23 01:36:21 +01:00
1962ed6b0b
improvements in extension handling
...
- extensions_sig is needed globally
- keep original json with config of extension
- fixed various bugs re: extension handling
2022-01-22 00:26:43 +01:00
0b56de6c99
[age restriction] progress 12/n
...
- taler-offline-tool now handles extensions
- command "extensions" added with subcommands "show" and "sign"
- parses extensions from taler config
- shows and signs of extensions and their configurations
- creates signed set of configurations for upload
- added test for retrieval of extension config
- simplified signature verification for extensions
- remove per-extension signatures, also from DB schema
- adjust prepared statements accordingly
- adjust DB event handler for extensions
- allow NULL for config for extension in DB schema
- handler for /management/extensions adjusted to new datastructures
- changed test for TALER_denom_blind/TALER_denom_sign_blinded with and
without TALER_AgeHash
- minor updates and various fixes
2022-01-21 15:41:02 +01:00
Thien-Thi Nguyen
0b6ebc6160
fix FTBFS (Linux) for 2022-01-18, "use 'pipe' instead of 'eventfd' on non-Linux systems"
...
add back #include <sys/eventfd.h>, but conditionalize on #ifdef __linux__
(This fix follows the spirit of the other changes (i.e.,
adding #ifdef __linux__) but might not be the best solution.)
2022-01-18 19:34:41 -05:00
Jonathan Buchanan
c10b783521
use 'pipe' instead of 'eventfd' on non-Linux systems
2022-01-18 09:15:54 -05:00
Christian Grothoff
766a291151
fix #7143
2022-01-11 17:56:32 +01:00
Christian Grothoff
e7aeec04f4
The current recoup API is broken. I guess this is another example where "trivial" API changes turn out to have (multiple!) unexpected consequences.
...
The current "/recoup" API does not have clear idempotency semantics, as we've discussed on the phone. This is already bad by itself, as it makes it hard to write down what the API does other than "whatever the implementation does".
However, it actually breaks correctness in this (admittedly kinda contrived, but not impossible) case:
Say that we have a coin A obtained via withdrawal and a coin B obtained via refreshing coin A. Now the denominations of A gets revoked..
The wallet does a recoup of A for EUR:1.
Now the denomination of B also gets revoked. The wallet recoups B (incidentally also for EUR:1) and now A can be recouped again for EUR:1. But now the exchange is in a state where it will refuse a legitimate recoup request for A because the detection for an idempotent request kicks in.
This is IMHO bad API design, and the exchange should simply always recoup the maximum amount.
Furthermore, we usually follow the principle of "API calls that take up DB space are paid". With the current recoup API, I can do many tiny recoup requests which the exchange then has to store, right?
I guess it would not be a big change to remove the "amount" value from the recoup/recoup-refresh request bodies, right?
- Florian
2022-01-11 12:47:35 +01:00
Christian Grothoff
aaaaa9a103
fix amount denormalization issue
2022-01-10 09:04:09 +01:00
14efa23a2b
improve error response for withdrawal
2022-01-10 01:23:46 +01:00
e30989c930
[age restriction] progress 11/n
...
Parse age restriction information from "/keys"
- parse "age_restriction" extension, extract mask for age groups
- parse denominations from "age_restricted_denoms", too, if available
2022-01-10 00:04:23 +01:00
d91750ca0f
drop extensions table
2022-01-08 19:45:19 +01:00
d6bf20028d
Fixed prepared statement for extensions
2022-01-08 19:45:00 +01:00
cc7d7707ab
[age restriction] progress 10/n
...
More work towards support for extensions:
- Prepared statements and DB-plugin-functions for setting and retrieving
configurations from the database added.
- primitive "registry" of extensions for age restrictions and peer2peer
(stub)
- TALER_Extensions now with FP for parsing, setting and converting a
configuration.
- /management/extensions handler now verifies signature of the (opaque)
json object for all extensions.
- /management/extensions handler calls the FP in the corrensponding
TALER_Extension for parsing and setting the configuration of a
particular extension
More work towards age restriction:
- TALER_Extensions interfaces for config-parser, -setter and converter
implemented for age restriction
- DB event handler now retrieves config from database, parses it and
sets it (the age mask) in the global extension.
- load_age_mask now loads age mask from the global extension (and not
from the config file)
- add age_restricted_denoms to /keys response
2022-01-08 14:40:20 +01:00
Christian Grothoff
b49fac3d58
-introduce new convenience macro
2021-12-31 11:23:42 +01:00
Christian Grothoff
5cd2bc5de3
-cleanup
2021-12-28 15:36:26 +01:00
ef4238874f
[age restriction] progress 9/n
...
More worke towards support for extensions and age restriction:
- taler-exchange-httpd_management_extensions.c almost completed
- handling of request implemented
- stub "set_extensions" for database transaction added
- utility functions added
- TALER_exchange_offline_extension_agemask_{sign,verify}
- TALER_agemask_parse_json
2021-12-27 23:24:48 +01:00
Christian Grothoff
070f442a11
resolve #7124 : ensure -s also deletes work_shards
2021-12-26 13:05:39 +01:00
Christian Grothoff
e7d4183d1c
-fix FTBFS
2021-12-25 17:22:54 +01:00
Christian Grothoff
74e4c6429a
clean up refresh-reveal logic, reducing local copying
2021-12-25 16:13:06 +01:00
Christian Grothoff
f6ecb6c895
-eliminate redundant hash operation on link signatures
2021-12-25 15:39:01 +01:00
Christian Grothoff
84c9adf5a6
v12: also do not sign over merchant_pub in REFUND signature, centralize logic
2021-12-25 14:58:04 +01:00
Christian Grothoff
1c34489905
-add missing #include
2021-12-25 14:08:47 +01:00
Christian Grothoff
87376e02eb
protocol v12 changes (/recoup split, signature changes) plus database sharding plus O(n^2)=>O(n) worst-case complexity reduction on coin balance checks
2021-12-25 13:56:40 +01:00
Christian Grothoff
2c14d33870
deduplicate melt signing logic, remove coin_pub from data being signed over
2021-12-25 13:56:40 +01:00
1b23857f2c
[age restriction] progress 8/n
...
More work towards support for extensions and age restriction
- updated gana
- added handler for DB-Event
- added TEH_extensions_init() and _done()
- added global for age restriction
- added stub for post handler
- added SQL-table for extension metadata
- added enum type for extensions and other data structures
Also:
- fixed some warnings -Wmaybe-unitialized
2021-12-23 15:15:33 +01:00
Christian Grothoff
62444504f7
denormalize reserve_pub in reserve tables to enable sharding
2021-12-19 13:43:33 +01:00
Christian Grothoff
527d903678
add new wrappers around merchant hash codes for tips and pickups
2021-12-19 11:54:07 +01:00
Christian Grothoff
1acc851deb
-fix recoup ugliness
2021-12-16 20:18:44 +01:00
Christian Grothoff
3b6a0dd599
compat
2021-12-15 17:02:11 +01:00
Christian Grothoff
110fe5b640
-fix FTBFS
2021-12-15 11:38:57 +01:00
Christian Grothoff
fdfcb29027
-fix FTBFS
2021-12-15 11:36:36 +01:00
Christian Grothoff
8cb0b890d3
fix test_sq:
2021-12-15 10:28:52 +01:00
Christian Grothoff
f4e3d9f716
-die pthread.h
2021-12-14 17:01:52 +01:00
Christian Grothoff
4cd70bc0a7
fix shard delay calculation also for 'transfer' tool
2021-12-14 16:26:10 +01:00
Christian Grothoff
1a1fafbd43
introducing GNUNET_TIME_Timestamp, recoup now with amounts
2021-12-14 16:04:40 +01:00
Christian Grothoff
bf54ee30d4
experiment
2021-12-13 12:28:28 +01:00
Christian Grothoff
a25429cadd
fix #7123
2021-12-11 20:06:15 +01:00
Christian Grothoff
40175318e9
towards simplified / more efficient /recoup
2021-12-11 15:39:24 +01:00
