1880 lines
65 KiB
Bash
Executable File
1880 lines
65 KiB
Bash
Executable File
#!/bin/bash
|
|
# Setup database which was generated from a perfectly normal
|
|
# exchange-wallet interaction and run the auditor against it.
|
|
#
|
|
# Check that the auditor report is as expected.
|
|
#
|
|
# Requires 'jq' tool and Postgres superuser rights!
|
|
set -eu
|
|
|
|
# Set of numbers for all the testcases.
|
|
# When adding new tests, increase the last number:
|
|
ALL_TESTS=`seq 0 32`
|
|
|
|
# $TESTS determines which tests we should run.
|
|
# This construction is used to make it easy to
|
|
# only run a subset of the tests. To only run a subset,
|
|
# pass the numbers of the tests to run as the FIRST
|
|
# argument to test-auditor.sh, i.e.:
|
|
#
|
|
# $ test-auditor.sh "1 3"
|
|
#
|
|
# to run tests 1 and 3 only. By default, all tests are run.
|
|
#
|
|
TESTS=${1:-$ALL_TESTS}
|
|
|
|
# Global variable to run the auditor processes under valgrind
|
|
# VALGRIND=valgrind
|
|
VALGRIND=""
|
|
|
|
# Exit, with status code "skip" (no 'real' failure)
|
|
function exit_skip() {
|
|
echo $1
|
|
exit 77
|
|
}
|
|
|
|
# Exit, with error message (hard failure)
|
|
function exit_fail() {
|
|
echo $1
|
|
kill `jobs -p` >/dev/null 2>/dev/null || true
|
|
wait
|
|
exit 1
|
|
}
|
|
|
|
|
|
# Operations to run before the actual audit
|
|
function pre_audit () {
|
|
# Launch bank
|
|
echo -n "Launching bank "
|
|
taler-bank-manage-testing $CONF postgres:///$DB serve-http 2>bank.err >bank.log &
|
|
for n in `seq 1 20`
|
|
do
|
|
echo -n "."
|
|
sleep 0.1
|
|
OK=1
|
|
wget http://localhost:8082/ -o /dev/null -O /dev/null >/dev/null && break
|
|
OK=0
|
|
done
|
|
if [ 1 != $OK ]
|
|
then
|
|
exit_skip "Failed to launch bank"
|
|
fi
|
|
echo " DONE"
|
|
if test ${1:-no} = "aggregator"
|
|
then
|
|
echo -n "Running exchange aggregator ..."
|
|
taler-exchange-aggregator -L INFO -t -c $CONF 2> aggregator.log || exit_fail "FAIL"
|
|
echo " DONE"
|
|
echo -n "Running exchange closer ..."
|
|
taler-exchange-closer -L INFO -t -c $CONF 2> closer.log || exit_fail "FAIL"
|
|
echo " DONE"
|
|
echo -n "Running exchange transfer ..."
|
|
taler-exchange-transfer -L INFO -t -c $CONF 2> transfer.log || exit_fail "FAIL"
|
|
echo " DONE"
|
|
fi
|
|
}
|
|
|
|
# actual audit run
|
|
function audit_only () {
|
|
# Run the auditor!
|
|
echo -n "Running audit(s) ..."
|
|
|
|
# Restart so that first run is always fresh, and second one is incremental
|
|
taler-auditor-dbinit -r -c $CONF
|
|
$VALGRIND taler-helper-auditor-aggregation -L DEBUG -c $CONF -m $MASTER_PUB > test-audit-aggregation.json 2> test-audit-aggregation.log || exit_fail "aggregation audit failed"
|
|
echo -n "."
|
|
$VALGRIND taler-helper-auditor-aggregation -L DEBUG -c $CONF -m $MASTER_PUB > test-audit-aggregation-inc.json 2> test-audit-aggregation-inc.log || exit_fail "incremental aggregation audit failed"
|
|
echo -n "."
|
|
$VALGRIND taler-helper-auditor-coins -L DEBUG -c $CONF -m $MASTER_PUB > test-audit-coins.json 2> test-audit-coins.log || exit_fail "coin audit failed"
|
|
echo -n "."
|
|
$VALGRIND taler-helper-auditor-coins -L DEBUG -c $CONF -m $MASTER_PUB > test-audit-coins-inc.json 2> test-audit-coins-inc.log || exit_fail "incremental coin audit failed"
|
|
echo -n "."
|
|
$VALGRIND taler-helper-auditor-deposits -L DEBUG -c $CONF -m $MASTER_PUB > test-audit-deposits.json 2> test-audit-deposits.log || exit_fail "deposits audit failed"
|
|
echo -n "."
|
|
$VALGRIND taler-helper-auditor-deposits -L DEBUG -c $CONF -m $MASTER_PUB > test-audit-deposits-inc.json 2> test-audit-deposits-inc.log || exit_fail "incremental deposits audit failed"
|
|
echo -n "."
|
|
$VALGRIND taler-helper-auditor-reserves -L DEBUG -c $CONF -m $MASTER_PUB > test-audit-reserves.json 2> test-audit-reserves.log || exit_fail "reserves audit failed"
|
|
echo -n "."
|
|
$VALGRIND taler-helper-auditor-reserves -L DEBUG -c $CONF -m $MASTER_PUB > test-audit-reserves-inc.json 2> test-audit-reserves-inc.log || exit_fail "incremental reserves audit failed"
|
|
echo -n "."
|
|
$VALGRIND taler-helper-auditor-wire -L DEBUG -c $CONF -m $MASTER_PUB > test-audit-wire.json 2> test-wire-audit.log || exit_fail "wire audit failed"
|
|
echo -n "."
|
|
$VALGRIND taler-helper-auditor-wire -L DEBUG -c $CONF -m $MASTER_PUB > test-audit-wire-inc.json 2> test-wire-audit-inc.log || exit_fail "wire audit failed"
|
|
echo -n "."
|
|
|
|
echo " DONE"
|
|
}
|
|
|
|
|
|
# Cleanup to run after the auditor
|
|
function post_audit () {
|
|
kill -TERM `jobs -p` >/dev/null 2>/dev/null || true
|
|
echo -n "Waiting for servers to die ..."
|
|
wait
|
|
echo "DONE"
|
|
echo -n "TeXing ."
|
|
taler-helper-auditor-render.py test-audit-aggregation.json test-audit-coins.json test-audit-deposits.json test-audit-reserves.json test-audit-wire.json < ../../contrib/auditor-report.tex.j2 > test-report.tex || exit_fail "Renderer failed"
|
|
|
|
echo -n "."
|
|
timeout 10 pdflatex test-report.tex >/dev/null || exit_fail "pdflatex failed"
|
|
echo -n "."
|
|
timeout 10 pdflatex test-report.tex >/dev/null
|
|
echo " DONE"
|
|
}
|
|
|
|
|
|
# Run audit process on current database, including report
|
|
# generation. Pass "aggregator" as $1 to run
|
|
# $ taler-exchange-aggregator
|
|
# before auditor (to trigger pending wire transfers).
|
|
function run_audit () {
|
|
pre_audit ${1:-no}
|
|
audit_only
|
|
post_audit
|
|
|
|
}
|
|
|
|
|
|
# Do a full reload of the (original) database
|
|
full_reload()
|
|
{
|
|
echo -n "Doing full reload of the database... "
|
|
dropdb $DB 2> /dev/null || true
|
|
createdb -T template0 $DB || exit_skip "could not create database"
|
|
# Import pre-generated database, -q(ietly) using single (-1) transaction
|
|
psql -Aqt $DB -q -1 -f ${BASEDB}.sql > /dev/null || exit_skip "Failed to load database"
|
|
echo "DONE"
|
|
}
|
|
|
|
|
|
function test_0() {
|
|
|
|
echo "===========0: normal run with aggregator==========="
|
|
run_audit aggregator
|
|
|
|
echo "Checking output"
|
|
# if an emergency was detected, that is a bug and we should fail
|
|
echo -n "Test for emergencies... "
|
|
jq -e .emergencies[0] < test-audit-coins.json > /dev/null && exit_fail "Unexpected emergency detected in ordinary run" || echo PASS
|
|
echo -n "Test for deposit confirmation emergencies... "
|
|
jq -e .deposit_confirmation_inconsistencies[0] < test-audit-deposits.json > /dev/null && exit_fail "Unexpected deposit confirmation inconsistency detected" || echo PASS
|
|
echo -n "Test for emergencies by count... "
|
|
jq -e .emergencies_by_count[0] < test-audit-coins.json > /dev/null && exit_fail "Unexpected emergency by count detected in ordinary run" || echo PASS
|
|
|
|
echo -n "Test for wire inconsistencies... "
|
|
jq -e .wire_out_amount_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected wire out inconsistency detected in ordinary run"
|
|
jq -e .reserve_in_amount_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected reserve in inconsistency detected in ordinary run"
|
|
jq -e .missattribution_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected missattribution inconsistency detected in ordinary run"
|
|
jq -e .row_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected row inconsistency detected in ordinary run"
|
|
jq -e .denomination_key_validity_withdraw_inconsistencies[0] < test-audit-reserves.json > /dev/null && exit_fail "Unexpected denomination key withdraw inconsistency detected in ordinary run"
|
|
jq -e .row_minor_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected minor row inconsistency detected in ordinary run"
|
|
jq -e .lag_details[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected lag detected in ordinary run"
|
|
jq -e .wire_format_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected wire format inconsistencies detected in ordinary run"
|
|
|
|
|
|
# TODO: check operation balances are correct (once we have all transaction types and wallet is deterministic)
|
|
# TODO: check revenue summaries are correct (once we have all transaction types and wallet is deterministic)
|
|
|
|
echo PASS
|
|
|
|
LOSS=`jq -r .total_bad_sig_loss < test-audit-aggregation.json`
|
|
if test $LOSS != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong total bad sig loss from aggregation, got unexpected loss of $LOSS"
|
|
fi
|
|
LOSS=`jq -r .total_bad_sig_loss < test-audit-coins.json`
|
|
if test $LOSS != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong total bad sig loss from coins, got unexpected loss of $LOSS"
|
|
fi
|
|
LOSS=`jq -r .total_bad_sig_loss < test-audit-reserves.json`
|
|
if test $LOSS != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong total bad sig loss from reserves, got unexpected loss of $LOSS"
|
|
fi
|
|
|
|
echo -n "Test for wire amounts... "
|
|
WIRED=`jq -r .total_wire_in_delta_plus < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Expected total wire delta plus wrong, got $WIRED"
|
|
fi
|
|
WIRED=`jq -r .total_wire_in_delta_minus < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Expected total wire delta minus wrong, got $WIRED"
|
|
fi
|
|
WIRED=`jq -r .total_wire_out_delta_plus < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Expected total wire delta plus wrong, got $WIRED"
|
|
fi
|
|
WIRED=`jq -r .total_wire_out_delta_minus < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Expected total wire delta minus wrong, got $WIRED"
|
|
fi
|
|
WIRED=`jq -r .total_missattribution_in < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Expected total missattribution in wrong, got $WIRED"
|
|
fi
|
|
echo PASS
|
|
|
|
echo -n "Checking for unexpected arithmetic differences "
|
|
LOSS=`jq -r .total_arithmetic_delta_plus < test-audit-aggregation.json`
|
|
if test $LOSS != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong arithmetic delta from aggregations, got unexpected plus of $LOSS"
|
|
fi
|
|
LOSS=`jq -r .total_arithmetic_delta_minus < test-audit-aggregation.json`
|
|
if test $LOSS != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong arithmetic delta from aggregation, got unexpected minus of $LOSS"
|
|
fi
|
|
LOSS=`jq -r .total_arithmetic_delta_plus < test-audit-coins.json`
|
|
if test $LOSS != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong arithmetic delta from coins, got unexpected plus of $LOSS"
|
|
fi
|
|
LOSS=`jq -r .total_arithmetic_delta_minus < test-audit-coins.json`
|
|
if test $LOSS != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong arithmetic delta from coins, got unexpected minus of $LOSS"
|
|
fi
|
|
LOSS=`jq -r .total_arithmetic_delta_plus < test-audit-reserves.json`
|
|
if test $LOSS != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong arithmetic delta from reserves, got unexpected plus of $LOSS"
|
|
fi
|
|
LOSS=`jq -r .total_arithmetic_delta_minus < test-audit-reserves.json`
|
|
if test $LOSS != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong arithmetic delta from reserves, got unexpected minus of $LOSS"
|
|
fi
|
|
|
|
jq -e .amount_arithmetic_inconsistencies[0] < test-audit-aggregation.json > /dev/null && exit_fail "Unexpected arithmetic inconsistencies from aggregations detected in ordinary run"
|
|
jq -e .amount_arithmetic_inconsistencies[0] < test-audit-coins.json > /dev/null && exit_fail "Unexpected arithmetic inconsistencies from coins detected in ordinary run"
|
|
jq -e .amount_arithmetic_inconsistencies[0] < test-audit-reserves.json > /dev/null && exit_fail "Unexpected arithmetic inconsistencies from reserves detected in ordinary run"
|
|
echo PASS
|
|
|
|
echo -n "Checking for unexpected wire out differences "
|
|
jq -e .wire_out_inconsistencies[0] < test-audit-aggregation.json > /dev/null && exit_fail "Unexpected wire out inconsistencies detected in ordinary run"
|
|
echo PASS
|
|
|
|
# cannot easily undo aggregator, hence full reload
|
|
full_reload
|
|
|
|
}
|
|
|
|
|
|
# Run without aggregator, hence auditor should detect wire
|
|
# transfer lag!
|
|
function test_1() {
|
|
|
|
echo "===========1: normal run==========="
|
|
run_audit
|
|
|
|
echo "Checking output"
|
|
# if an emergency was detected, that is a bug and we should fail
|
|
echo -n "Test for emergencies... "
|
|
jq -e .emergencies[0] < test-audit-coins.json > /dev/null && exit_fail "Unexpected emergency detected in ordinary run" || echo PASS
|
|
echo -n "Test for emergencies by count... "
|
|
jq -e .emergencies_by_count[0] < test-audit-coins.json > /dev/null && exit_fail "Unexpected emergency by count detected in ordinary run" || echo PASS
|
|
|
|
echo -n "Test for wire inconsistencies... "
|
|
jq -e .wire_out_amount_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected wire out inconsistency detected in ordinary run"
|
|
jq -e .reserve_in_amount_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected reserve in inconsistency detected in ordinary run"
|
|
jq -e .missattribution_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected missattribution inconsistency detected in ordinary run"
|
|
jq -e .row_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected row inconsistency detected in ordinary run"
|
|
jq -e .row_minor_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected minor row inconsistency detected in ordinary run"
|
|
jq -e .wire_format_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected wire format inconsistencies detected in ordinary run"
|
|
|
|
# TODO: check operation balances are correct (once we have all transaction types and wallet is deterministic)
|
|
# TODO: check revenue summaries are correct (once we have all transaction types and wallet is deterministic)
|
|
|
|
echo PASS
|
|
|
|
echo -n "Check for lag detection... "
|
|
|
|
# Check wire transfer lag reported (no aggregator!)
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-helper-auditor-wire.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
jq -e .lag_details[0] < test-audit-wire.json > /dev/null || exit_fail "Lag not detected in run without aggregator at age $DELTA"
|
|
|
|
LAG=`jq -r .total_amount_lag < test-audit-wire.json`
|
|
if test $LAG = "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Expected total lag to be non-zero"
|
|
fi
|
|
echo "PASS"
|
|
else
|
|
echo "SKIP (database too new)"
|
|
fi
|
|
|
|
|
|
echo -n "Test for wire amounts... "
|
|
WIRED=`jq -r .total_wire_in_delta_plus < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Expected total wire delta plus wrong, got $WIRED"
|
|
fi
|
|
WIRED=`jq -r .total_wire_in_delta_minus < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Expected total wire delta minus wrong, got $WIRED"
|
|
fi
|
|
WIRED=`jq -r .total_wire_out_delta_plus < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Expected total wire delta plus wrong, got $WIRED"
|
|
fi
|
|
WIRED=`jq -r .total_wire_out_delta_minus < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Expected total wire delta minus wrong, got $WIRED"
|
|
fi
|
|
WIRED=`jq -r .total_missattribution_in < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Expected total missattribution in wrong, got $WIRED"
|
|
fi
|
|
# Database was unmodified, no need to undo
|
|
echo "OK"
|
|
}
|
|
|
|
|
|
# Change amount of wire transfer reported by exchange
|
|
function test_2() {
|
|
|
|
echo "===========2: reserves_in inconsistency==========="
|
|
echo "UPDATE reserves_in SET credit_val=5 WHERE reserve_in_serial_id=1" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
ROW=`jq .reserve_in_amount_inconsistencies[0].row < test-audit-wire.json`
|
|
if test $ROW != 1
|
|
then
|
|
exit_fail "Row wrong"
|
|
fi
|
|
WIRED=`jq -r .reserve_in_amount_inconsistencies[0].amount_wired < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:10"
|
|
then
|
|
exit_fail "Amount wrong"
|
|
fi
|
|
EXPECTED=`jq -r .reserve_in_amount_inconsistencies[0].amount_exchange_expected < test-audit-wire.json`
|
|
if test $EXPECTED != "TESTKUDOS:5"
|
|
then
|
|
exit_fail "Expected amount wrong"
|
|
fi
|
|
|
|
WIRED=`jq -r .total_wire_in_delta_minus < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong total wire_in_delta_minus, got $WIRED"
|
|
fi
|
|
DELTA=`jq -r .total_wire_in_delta_plus < test-audit-wire.json`
|
|
if test $DELTA != "TESTKUDOS:5"
|
|
then
|
|
exit_fail "Expected total wire delta plus wrong, got $DELTA"
|
|
fi
|
|
echo PASS
|
|
|
|
# Undo database modification
|
|
echo "UPDATE reserves_in SET credit_val=10 WHERE reserve_in_serial_id=1" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
# Check for incoming wire transfer amount given being
|
|
# lower than what exchange claims to have received.
|
|
function test_3() {
|
|
|
|
echo "===========3: reserves_in inconsistency==========="
|
|
echo "UPDATE reserves_in SET credit_val=15 WHERE reserve_in_serial_id=1" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
EXPECTED=`jq -r .reserve_balance_summary_wrong_inconsistencies[0].auditor < test-audit-reserves.json`
|
|
if test $EXPECTED != "TESTKUDOS:5.01"
|
|
then
|
|
exit_fail "Expected reserve balance summary amount wrong, got $EXPECTED (auditor)"
|
|
fi
|
|
|
|
EXPECTED=`jq -r .reserve_balance_summary_wrong_inconsistencies[0].exchange < test-audit-reserves.json`
|
|
if test $EXPECTED != "TESTKUDOS:0.01"
|
|
then
|
|
exit_fail "Expected reserve balance summary amount wrong, got $EXPECTED (exchange)"
|
|
fi
|
|
|
|
WIRED=`jq -r .total_loss_balance_insufficient < test-audit-reserves.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong total loss from insufficient balance, got $WIRED"
|
|
fi
|
|
|
|
ROW=`jq -e .reserve_in_amount_inconsistencies[0].row < test-audit-wire.json`
|
|
if test $ROW != 1
|
|
then
|
|
exit_fail "Row wrong, got $ROW"
|
|
fi
|
|
|
|
WIRED=`jq -r .reserve_in_amount_inconsistencies[0].amount_exchange_expected < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:15"
|
|
then
|
|
exit_fail "Wrong amount_exchange_expected, got $WIRED"
|
|
fi
|
|
|
|
WIRED=`jq -r .reserve_in_amount_inconsistencies[0].amount_wired < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:10"
|
|
then
|
|
exit_fail "Wrong amount_wired, got $WIRED"
|
|
fi
|
|
|
|
WIRED=`jq -r .total_wire_in_delta_minus < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:5"
|
|
then
|
|
exit_fail "Wrong total wire_in_delta_minus, got $WIRED"
|
|
fi
|
|
|
|
WIRED=`jq -r .total_wire_in_delta_plus < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong total wire_in_delta_plus, got $WIRED"
|
|
fi
|
|
|
|
# Undo database modification
|
|
echo "UPDATE reserves_in SET credit_val=10 WHERE reserve_in_serial_id=1" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
# Check for incoming wire transfer amount given being
|
|
# lower than what exchange claims to have received.
|
|
function test_4() {
|
|
|
|
echo "===========4: deposit wire target wrong================="
|
|
# Original target bank account was 43, changing to 44
|
|
SERIAL=`echo "SELECT deposit_serial_id FROM deposits WHERE amount_with_fee_val=3 AND amount_with_fee_frac=0 ORDER BY deposit_serial_id LIMIT 1" | psql $DB -Aqt`
|
|
OLD_WIRE=`echo "SELECT wire FROM deposits WHERE deposit_serial_id=${SERIAL};" | psql $DB -Aqt`
|
|
echo "UPDATE deposits SET wire='{\"payto_uri\":\"payto://x-taler-bank/localhost:8082/44\",\"salt\":\"test-salt\"}' WHERE deposit_serial_id=${SERIAL}" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
|
|
jq -e .bad_sig_losses[0] < test-audit-coins.json > /dev/null || exit_fail "Bad signature not detected"
|
|
|
|
ROW=`jq -e .bad_sig_losses[0].row < test-audit-coins.json`
|
|
if test $ROW != ${SERIAL}
|
|
then
|
|
exit_fail "Row wrong, got $ROW"
|
|
fi
|
|
|
|
LOSS=`jq -r .bad_sig_losses[0].loss < test-audit-coins.json`
|
|
if test $LOSS != "TESTKUDOS:3"
|
|
then
|
|
exit_fail "Wrong deposit bad signature loss, got $LOSS"
|
|
fi
|
|
|
|
OP=`jq -r .bad_sig_losses[0].operation < test-audit-coins.json`
|
|
if test $OP != "deposit"
|
|
then
|
|
exit_fail "Wrong operation, got $OP"
|
|
fi
|
|
|
|
LOSS=`jq -r .total_bad_sig_loss < test-audit-coins.json`
|
|
if test $LOSS != "TESTKUDOS:3"
|
|
then
|
|
exit_fail "Wrong total bad sig loss, got $LOSS"
|
|
fi
|
|
|
|
echo PASS
|
|
# Undo:
|
|
echo "UPDATE deposits SET wire='$OLD_WIRE' WHERE deposit_serial_id=${SERIAL}" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
|
|
# Test where h_contract_terms in the deposit table is wrong
|
|
# (=> bad signature)
|
|
function test_5() {
|
|
echo "===========5: deposit contract hash wrong================="
|
|
# Modify h_wire hash, so it is inconsistent with 'wire'
|
|
SERIAL=`echo "SELECT deposit_serial_id FROM deposits WHERE amount_with_fee_val=3 AND amount_with_fee_frac=0 ORDER BY deposit_serial_id LIMIT 1" | psql $DB -Aqt`
|
|
OLD_H=`echo "SELECT h_contract_terms FROM deposits WHERE deposit_serial_id=$SERIAL;" | psql $DB -Aqt`
|
|
echo "UPDATE deposits SET h_contract_terms='\x12bb676444955c98789f219148aa31899d8c354a63330624d3d143222cf3bb8b8e16f69accd5a8773127059b804c1955696bf551dd7be62719870613332aa8d5' WHERE deposit_serial_id=$SERIAL" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
echo -n "Checking bad signature detection... "
|
|
ROW=`jq -e .bad_sig_losses[0].row < test-audit-coins.json`
|
|
if test $ROW != $SERIAL
|
|
then
|
|
exit_fail "Row wrong, got $ROW"
|
|
fi
|
|
|
|
LOSS=`jq -r .bad_sig_losses[0].loss < test-audit-coins.json`
|
|
if test $LOSS != "TESTKUDOS:3"
|
|
then
|
|
exit_fail "Wrong deposit bad signature loss, got $LOSS"
|
|
fi
|
|
|
|
OP=`jq -r .bad_sig_losses[0].operation < test-audit-coins.json`
|
|
if test $OP != "deposit"
|
|
then
|
|
exit_fail "Wrong operation, got $OP"
|
|
fi
|
|
|
|
LOSS=`jq -r .total_bad_sig_loss < test-audit-coins.json`
|
|
if test $LOSS != "TESTKUDOS:3"
|
|
then
|
|
exit_fail "Wrong total bad sig loss, got $LOSS"
|
|
fi
|
|
echo PASS
|
|
|
|
# Undo:
|
|
echo "UPDATE deposits SET h_contract_terms='${OLD_H}' WHERE deposit_serial_id=$SERIAL" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
# Test where denom_sig in known_coins table is wrong
|
|
# (=> bad signature)
|
|
function test_6() {
|
|
echo "===========6: known_coins signature wrong================="
|
|
# Modify denom_sig, so it is wrong
|
|
OLD_SIG=`echo 'SELECT denom_sig FROM known_coins LIMIT 1;' | psql $DB -Aqt`
|
|
COIN_PUB=`echo "SELECT coin_pub FROM known_coins WHERE denom_sig='$OLD_SIG';" | psql $DB -Aqt`
|
|
echo "UPDATE known_coins SET denom_sig='\x287369672d76616c200a2028727361200a2020287320233542383731423743393036444643303442424430453039353246413642464132463537303139374131313437353746324632323332394644443146324643333445393939413336363430334233413133324444464239413833353833464536354442374335434445304441453035374438363336434541423834463843323843344446304144363030343430413038353435363039373833434431333239393736423642433437313041324632414132414435413833303432434346314139464635394244434346374436323238344143354544364131373739463430353032323241373838423837363535453434423145443831364244353638303232413123290a2020290a20290b' WHERE coin_pub='$COIN_PUB'" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
ROW=`jq -e .bad_sig_losses[0].row < test-audit-coins.json`
|
|
if test $ROW != "1"
|
|
then
|
|
exit_fail "Row wrong, got $ROW"
|
|
fi
|
|
|
|
LOSS=`jq -r .bad_sig_losses[0].loss < test-audit-coins.json`
|
|
if test $LOSS == "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong deposit bad signature loss, got $LOSS"
|
|
fi
|
|
|
|
OP=`jq -r .bad_sig_losses[0].operation < test-audit-coins.json`
|
|
if test $OP != "melt"
|
|
then
|
|
exit_fail "Wrong operation, got $OP"
|
|
fi
|
|
|
|
LOSS=`jq -r .total_bad_sig_loss < test-audit-coins.json`
|
|
if test $LOSS == "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong total bad sig loss, got $LOSS"
|
|
fi
|
|
|
|
# Undo
|
|
echo "UPDATE known_coins SET denom_sig='$OLD_SIG' WHERE coin_pub='$COIN_PUB'" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
|
|
# Test where h_wire in the deposit table is wrong
|
|
function test_7() {
|
|
echo "===========7: reserves_out signature wrong================="
|
|
# Modify reserve_sig, so it is bogus
|
|
HBE=`echo 'SELECT h_blind_ev FROM reserves_out LIMIT 1;' | psql $DB -Aqt`
|
|
OLD_SIG=`echo "SELECT reserve_sig FROM reserves_out WHERE h_blind_ev='$HBE';" | psql $DB -Aqt`
|
|
A_VAL=`echo "SELECT amount_with_fee_val FROM reserves_out WHERE h_blind_ev='$HBE';" | psql $DB -Aqt`
|
|
A_FRAC=`echo "SELECT amount_with_fee_frac FROM reserves_out WHERE h_blind_ev='$HBE';" | psql $DB -Aqt`
|
|
# Normalize, we only deal with cents in this test-case
|
|
A_FRAC=`expr $A_FRAC / 1000000 || true`
|
|
echo "UPDATE reserves_out SET reserve_sig='\x9ef381a84aff252646a157d88eded50f708b2c52b7120d5a232a5b628f9ced6d497e6652d986b581188fb014ca857fd5e765a8ccc4eb7e2ce9edcde39accaa4b' WHERE h_blind_ev='$HBE'" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
OP=`jq -r .bad_sig_losses[0].operation < test-audit-reserves.json`
|
|
if test $OP != "withdraw"
|
|
then
|
|
exit_fail "Wrong operation, got $OP"
|
|
fi
|
|
|
|
LOSS=`jq -r .bad_sig_losses[0].loss < test-audit-reserves.json`
|
|
LOSS_TOTAL=`jq -r .total_bad_sig_loss < test-audit-reserves.json`
|
|
if test $LOSS != $LOSS_TOTAL
|
|
then
|
|
exit_fail "Expected loss $LOSS and total loss $LOSS_TOTAL do not match"
|
|
fi
|
|
if test $A_FRAC != 0
|
|
then
|
|
if [ $A_FRAC -lt 10 ]
|
|
then
|
|
A_PREV="0"
|
|
else
|
|
A_PREV=""
|
|
fi
|
|
if test $LOSS != "TESTKUDOS:$A_VAL.$A_PREV$A_FRAC"
|
|
then
|
|
exit_fail "Expected loss TESTKUDOS:$A_VAL.$A_PREV$A_FRAC but got $LOSS"
|
|
fi
|
|
else
|
|
if test $LOSS != "TESTKUDOS:$A_VAL"
|
|
then
|
|
exit_fail "Expected loss TESTKUDOS:$A_VAL but got $LOSS"
|
|
fi
|
|
fi
|
|
|
|
# Undo:
|
|
echo "UPDATE reserves_out SET reserve_sig='$OLD_SIG' WHERE h_blind_ev='$HBE'" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
# Test wire transfer subject disagreement!
|
|
function test_8() {
|
|
|
|
echo "===========8: wire-transfer-subject disagreement==========="
|
|
OLD_ID=`echo "SELECT id FROM app_banktransaction WHERE amount='TESTKUDOS:10' ORDER BY id LIMIT 1;" | psql $DB -Aqt`
|
|
OLD_WTID=`echo "SELECT subject FROM app_banktransaction WHERE id='$OLD_ID';" | psql $DB -Aqt`
|
|
NEW_WTID="CK9QBFY972KR32FVA1MW958JWACEB6XCMHHKVFMCH1A780Q12SVG"
|
|
echo "UPDATE app_banktransaction SET subject='$NEW_WTID' WHERE id='$OLD_ID';" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
DIAG=`jq -r .reserve_in_amount_inconsistencies[0].diagnostic < test-audit-wire.json`
|
|
if test "x$DIAG" != "xwire subject does not match"
|
|
then
|
|
exit_fail "Diagnostic wrong: $DIAG (0)"
|
|
fi
|
|
WTID=`jq -r .reserve_in_amount_inconsistencies[0].reserve_pub < test-audit-wire.json`
|
|
if test x$WTID != x"$OLD_WTID" -a x$WTID != x"$NEW_WTID"
|
|
then
|
|
exit_fail "WTID reported wrong: $WTID"
|
|
fi
|
|
EX_A=`jq -r .reserve_in_amount_inconsistencies[0].amount_exchange_expected < test-audit-wire.json`
|
|
if test x$WTID = x$OLD_WTID -a x$EX_A != x"TESTKUDOS:10"
|
|
then
|
|
exit_fail "Amount reported wrong: $EX_A"
|
|
fi
|
|
if test x$WTID = x$NEW_WTID -a x$EX_A != x"TESTKUDOS:0"
|
|
then
|
|
exit_fail "Amount reported wrong: $EX_A"
|
|
fi
|
|
DIAG=`jq -r .reserve_in_amount_inconsistencies[1].diagnostic < test-audit-wire.json`
|
|
if test "x$DIAG" != "xwire subject does not match"
|
|
then
|
|
exit_fail "Diagnostic wrong: $DIAG (1)"
|
|
fi
|
|
WTID=`jq -r .reserve_in_amount_inconsistencies[1].reserve_pub < test-audit-wire.json`
|
|
if test $WTID != "$OLD_WTID" -a $WTID != "$NEW_WTID"
|
|
then
|
|
exit_fail "WTID reported wrong: $WTID (wanted: $NEW_WTID or $OLD_WTID)"
|
|
fi
|
|
EX_A=`jq -r .reserve_in_amount_inconsistencies[1].amount_exchange_expected < test-audit-wire.json`
|
|
if test $WTID = "$OLD_WTID" -a $EX_A != "TESTKUDOS:10"
|
|
then
|
|
exit_fail "Amount reported wrong: $EX_A"
|
|
fi
|
|
if test $WTID = "$NEW_WTID" -a $EX_A != "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Amount reported wrong: $EX_A"
|
|
fi
|
|
|
|
WIRED=`jq -r .total_wire_in_delta_minus < test-audit-wire.json`
|
|
if test $WIRED != "TESTKUDOS:10"
|
|
then
|
|
exit_fail "Wrong total wire_in_delta_minus, got $WIRED"
|
|
fi
|
|
DELTA=`jq -r .total_wire_in_delta_plus < test-audit-wire.json`
|
|
if test $DELTA != "TESTKUDOS:10"
|
|
then
|
|
exit_fail "Expected total wire delta plus wrong, got $DELTA"
|
|
fi
|
|
echo PASS
|
|
|
|
# Undo database modification
|
|
echo "UPDATE app_banktransaction SET subject='$OLD_WTID' WHERE id='$OLD_ID';" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
|
|
# Test wire origin disagreement!
|
|
function test_9() {
|
|
|
|
echo "===========9: wire-origin disagreement==========="
|
|
OLD_ID=`echo "SELECT id FROM app_banktransaction WHERE amount='TESTKUDOS:10' ORDER BY id LIMIT 1;" | psql $DB -Aqt`
|
|
OLD_ACC=`echo "SELECT debit_account_id FROM app_banktransaction WHERE id='$OLD_ID';" | psql $DB -Aqt`
|
|
echo "UPDATE app_banktransaction SET debit_account_id=1 WHERE id='$OLD_ID';" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
AMOUNT=`jq -r .missattribution_in_inconsistencies[0].amount < test-audit-wire.json`
|
|
if test "x$AMOUNT" != "xTESTKUDOS:10"
|
|
then
|
|
exit_fail "Reported amount wrong: $AMOUNT"
|
|
fi
|
|
AMOUNT=`jq -r .total_missattribution_in < test-audit-wire.json`
|
|
if test "x$AMOUNT" != "xTESTKUDOS:10"
|
|
then
|
|
exit_fail "Reported total amount wrong: $AMOUNT"
|
|
fi
|
|
echo PASS
|
|
|
|
# Undo database modification
|
|
echo "UPDATE app_banktransaction SET debit_account_id=$OLD_ACC WHERE id='$OLD_ID';" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
# Test wire_in timestamp disagreement!
|
|
function test_10() {
|
|
|
|
echo "===========10: wire-timestamp disagreement==========="
|
|
OLD_ID=`echo "SELECT id FROM app_banktransaction WHERE amount='TESTKUDOS:10' ORDER BY id LIMIT 1;" | psql $DB -Aqt`
|
|
OLD_DATE=`echo "SELECT date FROM app_banktransaction WHERE id='$OLD_ID';" | psql $DB -Aqt`
|
|
echo "UPDATE app_banktransaction SET date=NOW() WHERE id=$OLD_ID;" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
DIAG=`jq -r .row_minor_inconsistencies[0].diagnostic < test-audit-wire.json`
|
|
if test "x$DIAG" != "xexecution date mismatch"
|
|
then
|
|
exit_fail "Reported diagnostic wrong: $DIAG"
|
|
fi
|
|
TABLE=`jq -r .row_minor_inconsistencies[0].table < test-audit-wire.json`
|
|
if test "x$TABLE" != "xreserves_in"
|
|
then
|
|
exit_fail "Reported table wrong: $TABLE"
|
|
fi
|
|
echo PASS
|
|
|
|
# Undo database modification
|
|
echo "UPDATE app_banktransaction SET date='$OLD_DATE' WHERE id=$OLD_ID;" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
# Test for extra outgoing wire transfer.
|
|
function test_11() {
|
|
|
|
echo "===========11: spurious outgoing transfer ==========="
|
|
OLD_ID=`echo "SELECT id FROM app_banktransaction WHERE amount='TESTKUDOS:10' ORDER BY id LIMIT 1;" | psql $DB -Aqt`
|
|
OLD_ACC=`echo "SELECT debit_account_id FROM app_banktransaction WHERE id=$OLD_ID;" | psql $DB -Aqt`
|
|
OLD_SUBJECT=`echo "SELECT subject FROM app_banktransaction WHERE id=$OLD_ID;" | psql $DB -Aqt`
|
|
# Change wire transfer to be FROM the exchange (#2) to elsewhere!
|
|
# (Note: this change also causes a missing incoming wire transfer, but
|
|
# this test is only concerned about the outgoing wire transfer
|
|
# being detected as such, and we simply ignore the other
|
|
# errors being reported.)
|
|
echo -e "UPDATE app_banktransaction SET debit_account_id=2,credit_account_id=1,subject='CK9QBFY972KR32FVA1MW958JWACEB6XCMHHKVFMCH1A780Q12SVG http://exchange.example.com/' WHERE id=$OLD_ID;" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
AMOUNT=`jq -r .wire_out_amount_inconsistencies[0].amount_wired < test-audit-wire.json`
|
|
if test "x$AMOUNT" != "xTESTKUDOS:10"
|
|
then
|
|
exit_fail "Reported wired amount wrong: $AMOUNT"
|
|
fi
|
|
AMOUNT=`jq -r .total_wire_out_delta_plus < test-audit-wire.json`
|
|
if test "x$AMOUNT" != "xTESTKUDOS:10"
|
|
then
|
|
exit_fail "Reported total plus amount wrong: $AMOUNT"
|
|
fi
|
|
AMOUNT=`jq -r .total_wire_out_delta_minus < test-audit-wire.json`
|
|
if test "x$AMOUNT" != "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported total minus amount wrong: $AMOUNT"
|
|
fi
|
|
AMOUNT=`jq -r .wire_out_amount_inconsistencies[0].amount_justified < test-audit-wire.json`
|
|
if test "x$AMOUNT" != "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported justified amount wrong: $AMOUNT"
|
|
fi
|
|
DIAG=`jq -r .wire_out_amount_inconsistencies[0].diagnostic < test-audit-wire.json`
|
|
if test "x$DIAG" != "xjustification for wire transfer not found"
|
|
then
|
|
exit_fail "Reported diagnostic wrong: $DIAG"
|
|
fi
|
|
echo PASS
|
|
|
|
# Undo database modification (exchange always has account #2)
|
|
echo "UPDATE app_banktransaction SET debit_account_id=$OLD_ACC,credit_account_id=2,subject='$OLD_SUBJECT' WHERE id=$OLD_ID;" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
|
|
# Test for hanging/pending refresh.
|
|
function test_12() {
|
|
|
|
echo "===========12: incomplete refresh ==========="
|
|
OLD_ACC=`echo "DELETE FROM refresh_revealed_coins;" | psql $DB -Aqt`
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing hung refresh detection... "
|
|
|
|
HANG=`jq -er .refresh_hanging[0].amount < test-audit-coins.json`
|
|
TOTAL_HANG=`jq -er .total_refresh_hanging < test-audit-coins.json`
|
|
if test x$HANG = TESTKUDOS:0
|
|
then
|
|
exit_fail "Hanging amount zero"
|
|
fi
|
|
if test x$TOTAL_HANG = TESTKUDOS:0
|
|
then
|
|
exit_fail "Total hanging amount zero"
|
|
fi
|
|
|
|
echo PASS
|
|
|
|
|
|
# cannot easily undo DELETE, hence full reload
|
|
full_reload
|
|
|
|
}
|
|
|
|
|
|
# Test for wrong signature on refresh.
|
|
function test_13() {
|
|
|
|
echo "===========13: wrong melt signature ==========="
|
|
# Modify denom_sig, so it is wrong
|
|
COIN_PUB=`echo "SELECT old_coin_pub FROM refresh_commitments LIMIT 1;" | psql $DB -Aqt`
|
|
OLD_SIG=`echo "SELECT old_coin_sig FROM refresh_commitments WHERE old_coin_pub='$COIN_PUB';" | psql $DB -Aqt`
|
|
NEW_SIG="\xba588af7c13c477dca1ac458f65cc484db8fba53b969b873f4353ecbd815e6b4c03f42c0cb63a2b609c2d726e612fd8e0c084906a41f409b6a23a08a83c89a02"
|
|
echo "UPDATE refresh_commitments SET old_coin_sig='$NEW_SIG' WHERE old_coin_pub='$COIN_PUB'" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
|
|
OP=`jq -er .bad_sig_losses[0].operation < test-audit-coins.json`
|
|
if test x$OP != xmelt
|
|
then
|
|
exit_fail "Operation wrong, got $OP"
|
|
fi
|
|
|
|
LOSS=`jq -er .bad_sig_losses[0].loss < test-audit-coins.json`
|
|
TOTAL_LOSS=`jq -er .total_bad_sig_loss < test-audit-coins.json`
|
|
if test x$LOSS != x$TOTAL_LOSS
|
|
then
|
|
exit_fail "Loss inconsistent, got $LOSS and $TOTAL_LOSS"
|
|
fi
|
|
if test x$TOTAL_LOSS = TESTKUDOS:0
|
|
then
|
|
exit_fail "Loss zero"
|
|
fi
|
|
|
|
echo PASS
|
|
|
|
# cannot easily undo DELETE, hence full reload
|
|
full_reload
|
|
}
|
|
|
|
|
|
# Test for wire fee disagreement
|
|
function test_14() {
|
|
|
|
echo "===========14: wire-fee disagreement==========="
|
|
|
|
# Check wire transfer lag reported (no aggregator!)
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-wire-auditor.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
|
|
# Wire fees are only checked/generated once there are
|
|
# actual outgoing wire transfers, so we need to run the
|
|
# aggregator here.
|
|
pre_audit aggregator
|
|
echo "UPDATE wire_fee SET wire_fee_frac=100;" | psql -Aqt $DB
|
|
audit_only
|
|
post_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
TABLE=`jq -r .row_inconsistencies[0].table < test-audit-aggregation.json`
|
|
if test "x$TABLE" != "xwire-fee"
|
|
then
|
|
exit_fail "Reported table wrong: $TABLE"
|
|
fi
|
|
DIAG=`jq -r .row_inconsistencies[0].diagnostic < test-audit-aggregation.json`
|
|
if test "x$DIAG" != "xwire fee signature invalid at given time"
|
|
then
|
|
exit_fail "Reported diagnostic wrong: $DIAG"
|
|
fi
|
|
echo PASS
|
|
|
|
# cannot easily undo aggregator, hence full reload
|
|
full_reload
|
|
|
|
else
|
|
echo "Test skipped (database too new)"
|
|
fi
|
|
|
|
}
|
|
|
|
|
|
|
|
# Test where h_wire in the deposit table is wrong
|
|
function test_15() {
|
|
echo "===========15: deposit wire hash wrong================="
|
|
|
|
# Check wire transfer lag reported (no aggregator!)
|
|
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-helper-auditor-wire.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
|
|
# Modify h_wire hash, so it is inconsistent with 'wire'
|
|
echo "UPDATE deposits SET h_wire='\x973e52d193a357940be9ef2939c19b0575ee1101f52188c3c01d9005b7d755c397e92624f09cfa709104b3b65605fe5130c90d7e1b7ee30f8fc570f39c16b853' WHERE deposit_serial_id=1" | psql -Aqt $DB
|
|
|
|
# The auditor checks h_wire consistency only for
|
|
# coins where the wire transfer has happened, hence
|
|
# run aggregator first to get this test to work.
|
|
run_audit aggregator
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
TABLE=`jq -r .row_inconsistencies[0].table < test-audit-aggregation.json`
|
|
if test "x$TABLE" != "xaggregation" -a "x$TABLE" != "xdeposits"
|
|
then
|
|
exit_fail "Reported table wrong: $TABLE"
|
|
fi
|
|
echo PASS
|
|
|
|
# cannot easily undo aggregator, hence full reload
|
|
full_reload
|
|
|
|
else
|
|
echo "Test skipped (database too new)"
|
|
fi
|
|
}
|
|
|
|
|
|
# Test where wired amount (wire out) is wrong
|
|
function test_16() {
|
|
echo "===========16: incorrect wire_out amount================="
|
|
|
|
# Check wire transfer lag reported (no aggregator!)
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-helper-auditor-wire.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
|
|
# First, we need to run the aggregator so we even
|
|
# have a wire_out to modify.
|
|
pre_audit aggregator
|
|
|
|
# Modify wire amount, such that it is inconsistent with 'aggregation'
|
|
# (exchange account is #2, so the logic below should select the outgoing
|
|
# wire transfer):
|
|
OLD_ID=`echo "SELECT id FROM app_banktransaction WHERE debit_account_id=2 ORDER BY id LIMIT 1;" | psql $DB -Aqt`
|
|
OLD_AMOUNT=`echo "SELECT amount FROM app_banktransaction WHERE id='${OLD_ID}';" | psql $DB -Aqt`
|
|
NEW_AMOUNT="TESTKUDOS:50"
|
|
echo "UPDATE app_banktransaction SET amount='${NEW_AMOUNT}' WHERE id='${OLD_ID}';" | psql -Aqt $DB
|
|
|
|
audit_only
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
|
|
AMOUNT=`jq -r .wire_out_amount_inconsistencies[0].amount_justified < test-audit-wire.json`
|
|
if test "x$AMOUNT" != "x$OLD_AMOUNT"
|
|
then
|
|
exit_fail "Reported justified amount wrong: $AMOUNT"
|
|
fi
|
|
AMOUNT=`jq -r .wire_out_amount_inconsistencies[0].amount_wired < test-audit-wire.json`
|
|
if test "x$AMOUNT" != "x$NEW_AMOUNT"
|
|
then
|
|
exit_fail "Reported wired amount wrong: $AMOUNT"
|
|
fi
|
|
TOTAL_AMOUNT=`jq -r .total_wire_out_delta_minus < test-audit-wire.json`
|
|
if test "x$TOTAL_AMOUNT" != "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported total wired amount minus wrong: $TOTAL_AMOUNT"
|
|
fi
|
|
TOTAL_AMOUNT=`jq -r .total_wire_out_delta_plus < test-audit-wire.json`
|
|
if test "x$TOTAL_AMOUNT" = "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported total wired amount plus wrong: $TOTAL_AMOUNT"
|
|
fi
|
|
echo PASS
|
|
|
|
echo "Second modification: wire nothing"
|
|
NEW_AMOUNT="TESTKUDOS:0"
|
|
echo "UPDATE app_banktransaction SET amount='${NEW_AMOUNT}' WHERE id='${OLD_ID}';" | psql -Aqt $DB
|
|
|
|
audit_only
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
|
|
AMOUNT=`jq -r .wire_out_amount_inconsistencies[0].amount_justified < test-audit-wire.json`
|
|
if test "x$AMOUNT" != "x$OLD_AMOUNT"
|
|
then
|
|
exit_fail "Reported justified amount wrong: $AMOUNT"
|
|
fi
|
|
AMOUNT=`jq -r .wire_out_amount_inconsistencies[0].amount_wired < test-audit-wire.json`
|
|
if test "x$AMOUNT" != "x$NEW_AMOUNT"
|
|
then
|
|
exit_fail "Reported wired amount wrong: $AMOUNT"
|
|
fi
|
|
TOTAL_AMOUNT=`jq -r .total_wire_out_delta_minus < test-audit-wire.json`
|
|
if test "x$TOTAL_AMOUNT" != "x$OLD_AMOUNT"
|
|
then
|
|
exit_fail "Reported total wired amount minus wrong: $TOTAL_AMOUNT (wanted $OLD_AMOUNT)"
|
|
fi
|
|
TOTAL_AMOUNT=`jq -r .total_wire_out_delta_plus < test-audit-wire.json`
|
|
if test "x$TOTAL_AMOUNT" != "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported total wired amount plus wrong: $TOTAL_AMOUNT"
|
|
fi
|
|
echo PASS
|
|
|
|
post_audit
|
|
|
|
# cannot easily undo aggregator, hence full reload
|
|
full_reload
|
|
else
|
|
echo "Test skipped (database too new)"
|
|
fi
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
# Test where wire-out timestamp is wrong
|
|
function test_17() {
|
|
echo "===========17: incorrect wire_out timestamp================="
|
|
|
|
# Check wire transfer lag reported (no aggregator!)
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-helper-auditor-wire.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
|
|
# First, we need to run the aggregator so we even
|
|
# have a wire_out to modify.
|
|
pre_audit aggregator
|
|
|
|
# Modify wire amount, such that it is inconsistent with 'aggregation'
|
|
# (exchange account is #2, so the logic below should select the outgoing
|
|
# wire transfer):
|
|
OLD_ID=`echo "SELECT id FROM app_banktransaction WHERE debit_account_id=2 ORDER BY id LIMIT 1;" | psql $DB -Aqt`
|
|
OLD_DATE=`echo "SELECT date FROM app_banktransaction WHERE id='${OLD_ID}';" | psql $DB -Aqt`
|
|
# Note: need - interval '1h' as "NOW()" may otherwise be exactly what is already in the DB
|
|
# (due to rounding, if this machine is fast...)
|
|
echo "UPDATE app_banktransaction SET date=NOW()- interval '1 hour' WHERE id='${OLD_ID}';" | psql -Aqt $DB
|
|
|
|
audit_only
|
|
post_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
TABLE=`jq -r .row_minor_inconsistencies[0].table < test-audit-wire.json`
|
|
if test "x$TABLE" != "xwire_out"
|
|
then
|
|
exit_fail "Reported table wrong: $TABLE"
|
|
fi
|
|
DIAG=`jq -r .row_minor_inconsistencies[0].diagnostic < test-audit-wire.json`
|
|
DIAG=`echo "$DIAG" | awk '{print $1 " " $2 " " $3}'`
|
|
if test "x$DIAG" != "xexecution date mismatch"
|
|
then
|
|
exit_fail "Reported diagnostic wrong: $DIAG"
|
|
fi
|
|
echo PASS
|
|
|
|
# cannot easily undo aggregator, hence full reload
|
|
full_reload
|
|
|
|
else
|
|
echo "Test skipped (database too new)"
|
|
fi
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
# Test where we trigger an emergency.
|
|
function test_18() {
|
|
echo "===========18: emergency================="
|
|
|
|
echo "DELETE FROM reserves_out;" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing emergency detection... "
|
|
|
|
jq -e .reserve_balance_summary_wrong_inconsistencies[0] < test-audit-reserves.json > /dev/null || exit_fail "Reserve balance inconsistency not detected"
|
|
|
|
jq -e .emergencies[0] < test-audit-coins.json > /dev/null || exit_fail "Emergency not detected"
|
|
jq -e .emergencies_by_count[0] < test-audit-coins.json > /dev/null || exit_fail "Emergency by count not detected"
|
|
jq -e .amount_arithmetic_inconsistencies[0] < test-audit-coins.json > /dev/null || exit_fail "Escrow balance calculation impossibility not detected"
|
|
|
|
echo PASS
|
|
|
|
echo -n "Testing loss calculation... "
|
|
|
|
AMOUNT=`jq -r .emergencies_loss < test-audit-coins.json`
|
|
if test "x$AMOUNT" == "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported amount wrong: $AMOUNT"
|
|
fi
|
|
AMOUNT=`jq -r .emergencies_loss_by_count < test-audit-coins.json`
|
|
if test "x$AMOUNT" == "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported amount wrong: $AMOUNT"
|
|
fi
|
|
|
|
echo PASS
|
|
|
|
# cannot easily undo broad DELETE operation, hence full reload
|
|
full_reload
|
|
}
|
|
|
|
|
|
|
|
# Test where reserve closure was done properly
|
|
function test_19() {
|
|
echo "===========19: reserve closure done properly ================="
|
|
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-helper-auditor-wire.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
|
|
OLD_TIME=`echo "SELECT execution_date FROM reserves_in WHERE reserve_in_serial_id=1;" | psql $DB -Aqt`
|
|
OLD_VAL=`echo "SELECT credit_val FROM reserves_in WHERE reserve_in_serial_id=1;" | psql $DB -Aqt`
|
|
RES_PUB=`echo "SELECT reserve_pub FROM reserves_in WHERE reserve_in_serial_id=1;" | psql $DB -Aqt`
|
|
OLD_EXP=`echo "SELECT expiration_date FROM reserves WHERE reserve_pub='${RES_PUB}';" | psql $DB -Aqt`
|
|
VAL_DELTA=1
|
|
NEW_TIME=`expr $OLD_TIME - 3024000000000 || true` # 5 weeks
|
|
NEW_EXP=`expr $OLD_EXP - 3024000000000 || true` # 5 weeks
|
|
NEW_CREDIT=`expr $OLD_VAL + $VAL_DELTA || true`
|
|
echo "UPDATE reserves_in SET execution_date='${NEW_TIME}',credit_val=${NEW_CREDIT} WHERE reserve_in_serial_id=1;" | psql -Aqt $DB
|
|
echo "UPDATE reserves SET current_balance_val=${VAL_DELTA}+current_balance_val,expiration_date='${NEW_EXP}' WHERE reserve_pub='${RES_PUB}';" | psql -Aqt $DB
|
|
|
|
# Need to run with the aggregator so the reserve closure happens
|
|
run_audit aggregator
|
|
|
|
echo -n "Testing reserve closure was done correctly... "
|
|
|
|
jq -e .reserve_not_closed_inconsistencies[0] < test-audit-reserves.json > /dev/null && exit_fail "Unexpected reserve not closed inconsistency detected"
|
|
|
|
echo "PASS"
|
|
|
|
echo -n "Testing no bogus transfers detected... "
|
|
jq -e .wire_out_amount_inconsistencies[0] < test-audit-wire.json > /dev/null && exit_fail "Unexpected wire out inconsistency detected in run with reserve closure"
|
|
|
|
echo "PASS"
|
|
|
|
# cannot easily undo aggregator, hence full reload
|
|
full_reload
|
|
|
|
else
|
|
echo "Test skipped (database too new)"
|
|
fi
|
|
}
|
|
|
|
|
|
# Test where reserve closure was not done properly
|
|
function test_20() {
|
|
echo "===========20: reserve closure missing ================="
|
|
|
|
OLD_TIME=`echo "SELECT execution_date FROM reserves_in WHERE reserve_in_serial_id=1;" | psql $DB -Aqt`
|
|
OLD_VAL=`echo "SELECT credit_val FROM reserves_in WHERE reserve_in_serial_id=1;" | psql $DB -Aqt`
|
|
RES_PUB=`echo "SELECT reserve_pub FROM reserves_in WHERE reserve_in_serial_id=1;" | psql $DB -Aqt`
|
|
NEW_TIME=`expr $OLD_TIME - 3024000000000 || true` # 5 weeks
|
|
NEW_CREDIT=`expr $OLD_VAL + 100 || true`
|
|
echo "UPDATE reserves_in SET execution_date='${NEW_TIME}',credit_val=${NEW_CREDIT} WHERE reserve_in_serial_id=1;" | psql -Aqt $DB
|
|
echo "UPDATE reserves SET current_balance_val=100+current_balance_val WHERE reserve_pub='${RES_PUB}';" | psql -Aqt $DB
|
|
|
|
# This time, run without the aggregator so the reserve closure is skipped!
|
|
run_audit
|
|
|
|
echo -n "Testing reserve closure missing detected... "
|
|
jq -e .reserve_not_closed_inconsistencies[0] < test-audit-reserves.json > /dev/null || exit_fail "Reserve not closed inconsistency not detected"
|
|
echo "PASS"
|
|
|
|
AMOUNT=`jq -r .total_balance_reserve_not_closed < test-audit-reserves.json`
|
|
if test "x$AMOUNT" == "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported total amount wrong: $AMOUNT"
|
|
fi
|
|
|
|
# Undo
|
|
echo "UPDATE reserves_in SET execution_date='${OLD_TIME}',credit_val=${OLD_VAL} WHERE reserve_in_serial_id=1;" | psql -Aqt $DB
|
|
echo "UPDATE reserves SET current_balance_val=current_balance_val-100 WHERE reserve_pub='${RES_PUB}';" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
# Test reserve closure reported but wire transfer missing detection
|
|
function test_21() {
|
|
echo "===========21: reserve closure missreported ================="
|
|
|
|
# Check wire transfer lag reported (no aggregator!)
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-helper-auditor-wire.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
|
|
OLD_TIME=`echo "SELECT execution_date FROM reserves_in WHERE reserve_in_serial_id=1;" | psql $DB -Aqt`
|
|
OLD_VAL=`echo "SELECT credit_val FROM reserves_in WHERE reserve_in_serial_id=1;" | psql $DB -Aqt`
|
|
RES_PUB=`echo "SELECT reserve_pub FROM reserves_in WHERE reserve_in_serial_id=1;" | psql $DB -Aqt`
|
|
OLD_EXP=`echo "SELECT expiration_date FROM reserves WHERE reserve_pub='${RES_PUB}';" | psql $DB -Aqt`
|
|
VAL_DELTA=1
|
|
NEW_TIME=`expr $OLD_TIME - 3024000000000 || true` # 5 weeks
|
|
NEW_EXP=`expr $OLD_EXP - 3024000000000 || true` # 5 weeks
|
|
NEW_CREDIT=`expr $OLD_VAL + $VAL_DELTA || true`
|
|
echo "UPDATE reserves_in SET execution_date='${NEW_TIME}',credit_val=${NEW_CREDIT} WHERE reserve_in_serial_id=1;" | psql -Aqt $DB
|
|
echo "UPDATE reserves SET current_balance_val=${VAL_DELTA}+current_balance_val,expiration_date='${NEW_EXP}' WHERE reserve_pub='${RES_PUB}';" | psql -Aqt $DB
|
|
|
|
# Need to first run the aggregator so the transfer is marked as done exists
|
|
pre_audit aggregator
|
|
|
|
|
|
# remove transaction from bank DB
|
|
echo "DELETE FROM app_banktransaction WHERE debit_account_id=2 AND amount='TESTKUDOS:${VAL_DELTA}';" | psql -Aqt $DB
|
|
|
|
audit_only
|
|
post_audit
|
|
|
|
echo -n "Testing lack of reserve closure transaction detected... "
|
|
|
|
jq -e .reserve_lag_details[0] < test-audit-wire.json > /dev/null || exit_fail "Reserve closure lag not detected"
|
|
|
|
AMOUNT=`jq -r .reserve_lag_details[0].amount < test-audit-wire.json`
|
|
if test "x$AMOUNT" != "xTESTKUDOS:${VAL_DELTA}"
|
|
then
|
|
exit_fail "Reported total amount wrong: $AMOUNT"
|
|
fi
|
|
AMOUNT=`jq -r .total_closure_amount_lag < test-audit-wire.json`
|
|
if test "x$AMOUNT" != "xTESTKUDOS:${VAL_DELTA}"
|
|
then
|
|
exit_fail "Reported total amount wrong: $AMOUNT"
|
|
fi
|
|
|
|
echo "PASS"
|
|
|
|
# cannot easily undo aggregator, hence full reload
|
|
full_reload
|
|
else
|
|
echo "Test skipped (database too new)"
|
|
fi
|
|
}
|
|
|
|
|
|
# Test use of withdraw-expired denomination key
|
|
function test_22() {
|
|
echo "===========22: denomination key expired ================="
|
|
|
|
H_DENOM=`echo 'SELECT denom_pub_hash FROM reserves_out LIMIT 1;' | psql $DB -Aqt`
|
|
|
|
OLD_START=`echo "SELECT valid_from FROM auditor_denominations WHERE denom_pub_hash='${H_DENOM}';" | psql $DB -Aqt`
|
|
OLD_WEXP=`echo "SELECT expire_withdraw FROM auditor_denominations WHERE denom_pub_hash='${H_DENOM}';" | psql $DB -Aqt`
|
|
# Basically expires 'immediately', so that the withdraw must have been 'invalid'
|
|
NEW_WEXP=`expr $OLD_START + 1 || true`
|
|
|
|
echo "UPDATE auditor_denominations SET expire_withdraw=${NEW_WEXP} WHERE denom_pub_hash='${H_DENOM}';" | psql -Aqt $DB
|
|
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
jq -e .denomination_key_validity_withdraw_inconsistencies[0] < test-audit-reserves.json > /dev/null || exit_fail "Denomination key withdraw inconsistency not detected"
|
|
|
|
echo PASS
|
|
|
|
# Undo modification
|
|
echo "UPDATE auditor_denominations SET expire_withdraw=${OLD_WEXP} WHERE denom_pub_hash='${H_DENOM}';" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
|
|
# Test calculation of wire-out amounts
|
|
function test_23() {
|
|
echo "===========23: wire out calculations ================="
|
|
|
|
# Check wire transfer lag reported (no aggregator!)
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-helper-auditor-wire.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
|
|
# Need to first run the aggregator so the transfer is marked as done exists
|
|
pre_audit aggregator
|
|
|
|
OLD_AMOUNT=`echo "SELECT amount_frac FROM wire_out WHERE wireout_uuid=1;" | psql $DB -Aqt`
|
|
NEW_AMOUNT=`expr $OLD_AMOUNT - 1000000 || true`
|
|
echo "UPDATE wire_out SET amount_frac=${NEW_AMOUNT} WHERE wireout_uuid=1;" | psql -Aqt $DB
|
|
|
|
audit_only
|
|
post_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
|
|
jq -e .wire_out_inconsistencies[0] < test-audit-aggregation.json > /dev/null || exit_fail "Wire out inconsistency not detected"
|
|
|
|
ROW=`jq .wire_out_inconsistencies[0].rowid < test-audit-aggregation.json`
|
|
if test $ROW != 1
|
|
then
|
|
exit_fail "Row wrong"
|
|
fi
|
|
AMOUNT=`jq -r .total_wire_out_delta_plus < test-audit-aggregation.json`
|
|
if test "x$AMOUNT" != "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported amount wrong: $AMOUNT"
|
|
fi
|
|
AMOUNT=`jq -r .total_wire_out_delta_minus < test-audit-aggregation.json`
|
|
if test "x$AMOUNT" != "xTESTKUDOS:0.01"
|
|
then
|
|
exit_fail "Reported total amount wrong: $AMOUNT"
|
|
fi
|
|
echo PASS
|
|
|
|
echo "Second pass: changing how amount is wrong to other direction"
|
|
NEW_AMOUNT=`expr $OLD_AMOUNT + 1000000 || true`
|
|
echo "UPDATE wire_out SET amount_frac=${NEW_AMOUNT} WHERE wireout_uuid=1;" | psql -Aqt $DB
|
|
|
|
pre_audit
|
|
audit_only
|
|
post_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
|
|
jq -e .wire_out_inconsistencies[0] < test-audit-aggregation.json > /dev/null || exit_fail "Wire out inconsistency not detected"
|
|
|
|
ROW=`jq .wire_out_inconsistencies[0].rowid < test-audit-aggregation.json`
|
|
if test $ROW != 1
|
|
then
|
|
exit_fail "Row wrong"
|
|
fi
|
|
AMOUNT=`jq -r .total_wire_out_delta_minus < test-audit-aggregation.json`
|
|
if test "x$AMOUNT" != "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported amount wrong: $AMOUNT"
|
|
fi
|
|
AMOUNT=`jq -r .total_wire_out_delta_plus < test-audit-aggregation.json`
|
|
if test "x$AMOUNT" != "xTESTKUDOS:0.01"
|
|
then
|
|
exit_fail "Reported total amount wrong: $AMOUNT"
|
|
fi
|
|
echo PASS
|
|
|
|
|
|
# cannot easily undo aggregator, hence full reload
|
|
full_reload
|
|
else
|
|
echo "Test skipped (database too new)"
|
|
fi
|
|
}
|
|
|
|
|
|
|
|
# Test for missing deposits in exchange database.
|
|
function test_24() {
|
|
|
|
echo "===========24: deposits missing ==========="
|
|
# Modify denom_sig, so it is wrong
|
|
CNT=`echo "SELECT COUNT(*) FROM deposit_confirmations;" | psql -Aqt $DB`
|
|
if test x$CNT = x0
|
|
then
|
|
echo "Skipping deposits missing test: no deposit confirmations in database!"
|
|
else
|
|
echo "DELETE FROM deposits;" | psql -Aqt $DB
|
|
echo "DELETE FROM deposits WHERE deposit_serial_id=1;" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
|
|
jq -e .deposit_confirmation_inconsistencies[0] < test-audit-deposits.json > /dev/null || exit_fail "Deposit confirmation inconsistency NOT detected"
|
|
|
|
AMOUNT=`jq -er .missing_deposit_confirmation_total < test-audit-deposits.json`
|
|
if test x$AMOUNT = xTESTKUDOS:0
|
|
then
|
|
exit_fail "Expected non-zero total missing deposit confirmation amount"
|
|
fi
|
|
COUNT=`jq -er .missing_deposit_confirmation_count < test-audit-deposits.json`
|
|
if test x$AMOUNT = x0
|
|
then
|
|
exit_fail "Expected non-zero total missing deposit confirmation count"
|
|
fi
|
|
|
|
echo PASS
|
|
|
|
# cannot easily undo DELETE, hence full reload
|
|
full_reload
|
|
fi
|
|
}
|
|
|
|
|
|
# Test for inconsistent coin history.
|
|
function test_25() {
|
|
|
|
echo "=========25: inconsistent coin history========="
|
|
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-helper-auditor-wire.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
|
|
# Drop refund, so coin history is bogus.
|
|
echo "DELETE FROM refunds WHERE refund_serial_id=1;" | psql -Aqt $DB
|
|
|
|
run_audit aggregator
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
|
|
jq -e .coin_inconsistencies[0] < test-audit-aggregation.json > /dev/null || exit_fail "Coin inconsistency NOT detected"
|
|
|
|
# Note: if the wallet withdrew much more than it spent, this might indeed
|
|
# go legitimately unnoticed.
|
|
jq -e .emergencies[0] < test-audit-coins.json > /dev/null || exit_fail "Denomination value emergency NOT reported"
|
|
|
|
AMOUNT=`jq -er .total_coin_delta_minus < test-audit-aggregation.json`
|
|
if test x$AMOUNT = xTESTKUDOS:0
|
|
then
|
|
exit_fail "Expected non-zero total inconsistency amount from coins"
|
|
fi
|
|
# Note: if the wallet withdrew much more than it spent, this might indeed
|
|
# go legitimately unnoticed.
|
|
COUNT=`jq -er .emergencies_risk_by_amount < test-audit-coins.json`
|
|
if test x$AMOUNT = xTESTKUDOS:0
|
|
then
|
|
exit_fail "Expected non-zero emergency-by-amount"
|
|
fi
|
|
echo PASS
|
|
|
|
# cannot easily undo DELETE, hence full reload
|
|
full_reload
|
|
else
|
|
echo "Test skipped (database too new)"
|
|
fi
|
|
}
|
|
|
|
|
|
# Test for deposit wire target malformed
|
|
function test_26() {
|
|
echo "===========26: deposit wire target malformed ================="
|
|
# Expects 'payto_uri', not 'url' (also breaks signature, but we cannot even check that).
|
|
SERIAL=`echo "SELECT deposit_serial_id FROM deposits WHERE amount_with_fee_val=3 AND amount_with_fee_frac=0 ORDER BY deposit_serial_id LIMIT 1" | psql $DB -Aqt`
|
|
OLD_WIRE=`echo "SELECT wire FROM deposits WHERE deposit_serial_id=${SERIAL};" | psql $DB -Aqt`
|
|
echo "UPDATE deposits SET wire='{\"url\":\"payto://x-taler-bank/localhost:8082/44\",\"salt\":\"test-salt\"}' WHERE deposit_serial_id=${SERIAL}" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
|
|
jq -e .bad_sig_losses[0] < test-audit-coins.json > /dev/null || exit_fail "Bad signature not detected"
|
|
|
|
ROW=`jq -e .bad_sig_losses[0].row < test-audit-coins.json`
|
|
if test $ROW != ${SERIAL}
|
|
then
|
|
exit_fail "Row wrong, got $ROW"
|
|
fi
|
|
|
|
LOSS=`jq -r .bad_sig_losses[0].loss < test-audit-coins.json`
|
|
if test $LOSS != "TESTKUDOS:3"
|
|
then
|
|
exit_fail "Wrong deposit bad signature loss, got $LOSS"
|
|
fi
|
|
|
|
OP=`jq -r .bad_sig_losses[0].operation < test-audit-coins.json`
|
|
if test $OP != "deposit"
|
|
then
|
|
exit_fail "Wrong operation, got $OP"
|
|
fi
|
|
|
|
LOSS=`jq -r .total_bad_sig_loss < test-audit-coins.json`
|
|
if test $LOSS != "TESTKUDOS:3"
|
|
then
|
|
exit_fail "Wrong total bad sig loss, got $LOSS"
|
|
fi
|
|
|
|
echo PASS
|
|
# Undo:
|
|
echo "UPDATE deposits SET wire='$OLD_WIRE' WHERE deposit_serial_id=${SERIAL}" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
# Test for duplicate wire transfer subject
|
|
function test_27() {
|
|
echo "===========27: duplicate WTID detection ================="
|
|
|
|
# Check wire transfer lag reported (no aggregator!)
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-helper-auditor-wire.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
|
|
pre_audit aggregator
|
|
|
|
# Obtain data to duplicate.
|
|
ID=`echo "SELECT id FROM app_banktransaction WHERE debit_account_id=2 LIMIT 1" | psql $DB -Aqt`
|
|
WTID=`echo "SELECT subject FROM app_banktransaction WHERE debit_account_id=2 LIMIT 1" | psql $DB -Aqt`
|
|
UUID="992e8936-a64d-4845-87d7-021440330f8a"
|
|
echo "INSERT INTO app_banktransaction (amount,subject,date,credit_account_id,debit_account_id,cancelled,request_uid) VALUES ('TESTKUDOS:1','$WTID',NOW(),12,2,'f','$UUID')" | psql -Aqt $DB
|
|
|
|
audit_only
|
|
post_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
|
|
AMOUNT=`jq -r .wire_format_inconsistencies[0].amount < test-audit-wire.json`
|
|
if test "${AMOUNT}" != "TESTKUDOS:1"
|
|
then
|
|
exit_fail "Amount wrong, got ${AMOUNT}"
|
|
fi
|
|
|
|
AMOUNT=`jq -r .total_wire_format_amount < test-audit-wire.json`
|
|
if test "${AMOUNT}" != "TESTKUDOS:1"
|
|
then
|
|
exit_fail "Wrong total wire format amount, got $AMOUNT"
|
|
fi
|
|
|
|
# cannot easily undo aggregator, hence full reload
|
|
full_reload
|
|
else
|
|
echo "Test skipped (database too new)"
|
|
fi
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
# Test where denom_sig in known_coins table is wrong
|
|
# (=> bad signature) AND the coin is used in aggregation
|
|
function test_28() {
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-helper-auditor-wire.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
|
|
echo "===========28: known_coins signature wrong================="
|
|
# Modify denom_sig, so it is wrong
|
|
OLD_SIG=`echo 'SELECT denom_sig FROM known_coins LIMIT 1;' | psql $DB -Aqt`
|
|
COIN_PUB=`echo "SELECT coin_pub FROM known_coins WHERE denom_sig='$OLD_SIG';" | psql $DB -Aqt`
|
|
echo "UPDATE known_coins SET denom_sig='\x287369672d76616c200a2028727361200a2020287320233542383731423743393036444643303442424430453039353246413642464132463537303139374131313437353746324632323332394644443146324643333445393939413336363430334233413133324444464239413833353833464536354442374335434445304441453035374438363336434541423834463843323843344446304144363030343430413038353435363039373833434431333239393736423642433437313041324632414132414435413833303432434346314139464635394244434346374436323238344143354544364131373739463430353032323241373838423837363535453434423145443831364244353638303232413123290a2020290a20290b' WHERE coin_pub='$COIN_PUB'" | psql -Aqt $DB
|
|
|
|
run_audit aggregator
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
ROW=`jq -e .bad_sig_losses[0].row < test-audit-aggregation.json`
|
|
if test $ROW != "1"
|
|
then
|
|
exit_fail "Row wrong, got $ROW"
|
|
fi
|
|
|
|
LOSS=`jq -r .bad_sig_losses[0].loss < test-audit-aggregation.json`
|
|
if test $LOSS == "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong deposit bad signature loss, got $LOSS"
|
|
fi
|
|
|
|
OP=`jq -r .bad_sig_losses[0].operation < test-audit-aggregation.json`
|
|
if test $OP != "wire"
|
|
then
|
|
exit_fail "Wrong operation, got $OP"
|
|
fi
|
|
TAB=`jq -r .row_inconsistencies[0].table < test-audit-aggregation.json`
|
|
if test $TAB != "deposit"
|
|
then
|
|
exit_fail "Wrong table for row inconsistency, got $TAB"
|
|
fi
|
|
|
|
LOSS=`jq -r .total_bad_sig_loss < test-audit-aggregation.json`
|
|
if test $LOSS == "TESTKUDOS:0"
|
|
then
|
|
exit_fail "Wrong total bad sig loss, got $LOSS"
|
|
fi
|
|
|
|
echo "OK"
|
|
# cannot easily undo aggregator, hence full reload
|
|
full_reload
|
|
|
|
else
|
|
echo "Test skipped (database too new)"
|
|
fi
|
|
}
|
|
|
|
|
|
|
|
# Test where fees known to the auditor differ from those
|
|
# accounted for by the exchange
|
|
function test_29() {
|
|
echo "===========29: withdraw fee inconsistency ================="
|
|
|
|
echo "UPDATE auditor_denominations SET fee_withdraw_frac=5000000 WHERE coin_val=1;" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
|
|
echo -n "Testing inconsistency detection... "
|
|
AMOUNT=`jq -r .total_balance_summary_delta_plus < test-audit-reserves.json`
|
|
if test "x$AMOUNT" == "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported total amount wrong: $AMOUNT"
|
|
fi
|
|
|
|
PROFIT=`jq -r .amount_arithmetic_inconsistencies[0].profitable < test-audit-coins.json`
|
|
if test "x$PROFIT" != "x-1"
|
|
then
|
|
exit_fail "Reported wrong profitability: $PROFIT"
|
|
fi
|
|
echo "OK"
|
|
# Undo
|
|
echo "UPDATE auditor_denominations SET fee_withdraw_frac=2000000 WHERE coin_val=1;" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
# Test where fees known to the auditor differ from those
|
|
# accounted for by the exchange
|
|
function test_30() {
|
|
echo "===========30: melt fee inconsistency ================="
|
|
|
|
echo "UPDATE auditor_denominations SET fee_refresh_frac=5000000 WHERE coin_val=10;" | psql -Aqt $DB
|
|
|
|
run_audit
|
|
echo -n "Testing inconsistency detection... "
|
|
AMOUNT=`jq -r .bad_sig_losses[0].loss < test-audit-coins.json`
|
|
if test "x$AMOUNT" == "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported total amount wrong: $AMOUNT"
|
|
fi
|
|
|
|
PROFIT=`jq -r .amount_arithmetic_inconsistencies[0].profitable < test-audit-coins.json`
|
|
if test "x$PROFIT" != "x-1"
|
|
then
|
|
exit_fail "Reported profitability wrong: $PROFIT"
|
|
fi
|
|
|
|
jq -e .emergencies[0] < test-audit-coins.json > /dev/null && exit_fail "Unexpected emergency detected in ordinary run"
|
|
echo "OK"
|
|
# Undo
|
|
echo "UPDATE auditor_denominations SET fee_refresh_frac=3000000 WHERE coin_val=1;" | psql -Aqt $DB
|
|
|
|
}
|
|
|
|
|
|
# Test where fees known to the auditor differ from those
|
|
# accounted for by the exchange
|
|
function test_31() {
|
|
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-helper-auditor-wire.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
|
|
echo "===========31: deposit fee inconsistency ================="
|
|
|
|
echo "UPDATE auditor_denominations SET fee_deposit_frac=5000000 WHERE coin_val=8;" | psql -Aqt $DB
|
|
|
|
run_audit aggregator
|
|
echo -n "Testing inconsistency detection... "
|
|
AMOUNT=`jq -r .total_bad_sig_loss < test-audit-coins.json`
|
|
if test "x$AMOUNT" == "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported total amount wrong: $AMOUNT"
|
|
fi
|
|
|
|
OP=`jq -r .bad_sig_losses[0].operation < test-audit-coins.json`
|
|
if test "x$OP" != "xdeposit"
|
|
then
|
|
exit_fail "Reported wrong operation: $OP"
|
|
fi
|
|
|
|
echo "OK"
|
|
# Undo
|
|
echo "UPDATE auditor_denominations SET fee_deposit_frac=2000000 WHERE coin_val=8;" | psql -Aqt $DB
|
|
|
|
else
|
|
echo "Test skipped (database too new)"
|
|
fi
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
# Test where denom_sig in known_coins table is wrong
|
|
# (=> bad signature)
|
|
function test_32() {
|
|
|
|
# NOTE: This test is EXPECTED to fail for ~1h after
|
|
# re-generating the test database as we do not
|
|
# report lag of less than 1h (see GRACE_PERIOD in
|
|
# taler-helper-auditor-wire.c)
|
|
if [ $DATABASE_AGE -gt 3600 ]
|
|
then
|
|
|
|
echo "===========32: known_coins signature wrong w. aggregation================="
|
|
# Modify denom_sig, so it is wrong
|
|
OLD_SIG=`echo 'SELECT denom_sig FROM known_coins LIMIT 1;' | psql $DB -At`
|
|
COIN_PUB=`echo "SELECT coin_pub FROM known_coins WHERE denom_sig='$OLD_SIG';" | psql $DB -At`
|
|
echo "UPDATE known_coins SET denom_sig='\x287369672d76616c200a2028727361200a2020287320233542383731423743393036444643303442424430453039353246413642464132463537303139374131313437353746324632323332394644443146324643333445393939413336363430334233413133324444464239413833353833464536354442374335434445304441453035374438363336434541423834463843323843344446304144363030343430413038353435363039373833434431333239393736423642433437313041324632414132414435413833303432434346314139464635394244434346374436323238344143354544364131373739463430353032323241373838423837363535453434423145443831364244353638303232413123290a2020290a20290b' WHERE coin_pub='$COIN_PUB'" | psql -At $DB
|
|
|
|
run_audit aggregator
|
|
echo -n "Testing inconsistency detection... "
|
|
|
|
AMOUNT=`jq -r .total_bad_sig_loss < test-audit-aggregation.json`
|
|
if test "x$AMOUNT" == "xTESTKUDOS:0"
|
|
then
|
|
exit_fail "Reported total amount wrong: $AMOUNT"
|
|
fi
|
|
|
|
OP=`jq -r .bad_sig_losses[0].operation < test-audit-aggregation.json`
|
|
if test "x$OP" != "xwire"
|
|
then
|
|
exit_fail "Reported wrong operation: $OP"
|
|
fi
|
|
|
|
# FIXME: test incomplete...
|
|
# BIG Q: why is wire_out empty? => aggregation test does not actually
|
|
# find WTIDs to check, and thus doesn't detect the bad signature!
|
|
|
|
echo "OK"
|
|
# Cannot undo aggregation, do full reload
|
|
full_reload
|
|
|
|
fi
|
|
}
|
|
|
|
|
|
|
|
# *************** Main test loop starts here **************
|
|
|
|
|
|
# Run all the tests against the database given in $1.
|
|
# Sets $fail to 0 on success, non-zero on failure.
|
|
check_with_database()
|
|
{
|
|
BASEDB=$1
|
|
echo "Running test suite with database $BASEDB using configuration $CONF"
|
|
|
|
# Setup database-specific globals
|
|
MASTER_PUB=`cat ${BASEDB}.mpub`
|
|
|
|
# Where to store wire fee details for aggregator
|
|
echo "Storing wire fees"
|
|
WIRE_FEE_DIR=`taler-config -c $CONF -f -s exchangedb -o WIREFEE_BASE_DIR`
|
|
mkdir -p $WIRE_FEE_DIR
|
|
cp ${BASEDB}.fees $WIRE_FEE_DIR/x-taler-bank.fee
|
|
|
|
# Determine database age
|
|
echo "Calculating database age based on ${BASEDB}.age"
|
|
AGE=`cat ${BASEDB}.age`
|
|
NOW=`date +%s`
|
|
# NOTE: expr "fails" if the result is zero.
|
|
DATABASE_AGE=`expr ${NOW} - ${AGE} || true`
|
|
echo "Database age is ${DATABASE_AGE} seconds"
|
|
|
|
# Load database
|
|
full_reload
|
|
|
|
# Run test suite
|
|
fail=0
|
|
for i in $TESTS
|
|
do
|
|
test_$i
|
|
if test 0 != $fail
|
|
then
|
|
break
|
|
fi
|
|
done
|
|
echo "Cleanup (disabled, leaving database $DB behind)"
|
|
# dropdb $DB
|
|
# rm -r $WIRE_FEE_DIR
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# *************** Main logic starts here **************
|
|
|
|
# ####### Setup globals ######
|
|
# Postgres database to use
|
|
DB=taler-auditor-test
|
|
|
|
# Configuration file to use
|
|
CONF=test-auditor.conf
|
|
|
|
# test required commands exist
|
|
echo "Testing for jq"
|
|
jq -h > /dev/null || exit_skip "jq required"
|
|
echo "Testing for taler-bank-manage"
|
|
taler-bank-manage -h >/dev/null </dev/null || exit_skip "taler-bank-manage required"
|
|
echo "Testing for pdflatex"
|
|
which pdflatex > /dev/null </dev/null || exit_skip "pdflatex required"
|
|
|
|
# check if we should regenerate the database
|
|
if test -n "${1:-}"
|
|
then
|
|
echo "Custom run, will only run on existing DB."
|
|
else
|
|
echo -n "Testing for taler-wallet-cli"
|
|
if taler-wallet-cli -h >/dev/null </dev/null 2>/dev/null
|
|
then
|
|
MYDIR=`mktemp -d /tmp/taler-auditor-basedbXXXXXX`
|
|
echo " FOUND. Generating fresh database at $MYDIR"
|
|
if ./generate-auditor-basedb.sh $MYDIR/basedb
|
|
then
|
|
check_with_database $MYDIR/basedb
|
|
if test x$fail != x0
|
|
then
|
|
exit $fail
|
|
else
|
|
echo "Cleaning up $MYDIR..."
|
|
rm -rf $MYDIR || echo "Removing $MYDIR failed"
|
|
fi
|
|
else
|
|
echo "Generation failed, running only on existing DB"
|
|
fi
|
|
else
|
|
echo " NOT FOUND, running only on existing DB"
|
|
fi
|
|
fi
|
|
|
|
check_with_database "auditor-basedb"
|
|
|
|
exit $fail
|