#!/bin/bash # Script to test revocation. # # Requires the wallet CLI to be installed and in the path. Furthermore, the # user running this script must be Postgres superuser and be allowed to # create/drop databases. # Also the jq utility needs to be installed echo -n "Testing for jq" jq --version >/dev/null </dev/null || exit_skip " MISSING" echo " FOUND" source "common.sh" setup_config "recoup" TMP_DIR=$(mktemp -d revocation-tmp-XXXXXX) taler-config -c "$CONF" -s exchange -o KEYDIR -V "${TMP_DIR}/keydir/" taler-config -c "$CONF" -s exchange -o REVOCATION_DIR -V "${TMP_DIR}/revdir/" setup_services launch_services wait_for_services # run wallet CLI echo "Running wallet" taler-wallet-cli --wallet-db=$WALLET_DB --no-throttle \ testing withdraw \ -e $EXCHANGE_URL \ -b $BANK_URL \ -a TESTKUDOS:8 export coins=$(taler-wallet-cli --wallet-db=$WALLET_DB advanced dump-coins) # Find coin we want to revoke export rc=$(echo "$coins" | jq -r '[.coins[] | select((.denom_value == "TESTKUDOS:2"))][0] | .coin_pub') # Find the denom export rd=$(echo "$coins" | jq -r '[.coins[] | select((.denom_value == "TESTKUDOS:2"))][0] | .denom_pub_hash') echo "Revoking denomination ${rd} (to affect coin ${rc})" # Find all other coins, which will be suspended export susp=$(echo "$coins" | jq --arg rc "$rc" '[.coins[] | select(.coin_pub != $rc) | .coin_pub]') # Do the revocation taler-exchange-keyup -o e2a2.dat -c $CONF -r $rd taler-auditor-sign -c $CONF -u $AUDITOR_URL -r e2a2.dat -o a2e2.dat -m $MASTER_PUB rm e2a2.dat mv a2e2.dat $ABD # Restart the exchange... kill -SIGUSR1 $EXCHANGE_PID sleep 1 # Give exchange time to re-scan data echo "Restarted the exchange post revocation" # Now we suspend the other coins, so later we will pay with the recouped coin taler-wallet-cli --wallet-db=$WALLET_DB advanced suspend-coins "$susp" # Update exchange /keys so recoup gets scheduled taler-wallet-cli --wallet-db=$WALLET_DB exchanges update \ -f $EXCHANGE_URL # Block until scheduled operations are done taler-wallet-cli --wallet-db=$WALLET_DB run-until-done # Now we buy something, only the coins resulting from recouped will be # used, as other ones are suspended taler-wallet-cli --wallet-db=$WALLET_DB testing test-pay \ -m $MERCHANT_URL -k sandbox \ -a "TESTKUDOS:1" -s "foo" taler-wallet-cli --wallet-db=$WALLET_DB run-until-done echo "Purchase with recoup'ed coin (via reserve) done" # Find coin we want to refresh, then revoke export rrc=$(echo "$coins" | jq -r '[.coins[] | select((.denom_value == "TESTKUDOS:5"))][0] | .coin_pub') # Find the denom export zombie_denom=$(echo "$coins" | jq -r '[.coins[] | select((.denom_value == "TESTKUDOS:5"))][0] | .denom_pub_hash') echo "Will refresh coin ${rrc} of denomination ${zombie_denom}" # Find all other coins, which will be suspended export susp=$(echo "$coins" | jq --arg rrc "$rrc" '[.coins[] | select(.coin_pub != $rrc) | .coin_pub]') export rrc export zombie_denom # Travel into the future! (must match DURATION_WITHDRAW option) export TIMETRAVEL="--timetravel=604800000000" echo "Launching exchange 1 week in the future" kill -TERM $EXCHANGE_PID taler-exchange-httpd $TIMETRAVEL -c $CONF 2> taler-exchange-httpd.log & export EXCHANGE_PID=$! # Wait for exchange to be available for n in `seq 1 50` do echo -n "." sleep 0.1 OK=0 # exchange wget http://localhost:8081/ -o /dev/null -O /dev/null >/dev/null || continue OK=1 break done echo "Refreshing coin $rrc" taler-wallet-cli $TIMETRAVEL --wallet-db=$WALLET_DB advanced force-refresh "$rrc" taler-wallet-cli $TIMETRAVEL --wallet-db=$WALLET_DB run-until-done # Update our list of the coins export coins=$(taler-wallet-cli $TIMETRAVEL --wallet-db=$WALLET_DB advanced dump-coins) # Find resulting refreshed coin export freshc=$(echo "$coins" | jq -r --arg rrc "$rrc" \ '[.coins[] | select((.refresh_parent_coin_pub == $rrc) and .denom_value == "TESTKUDOS:0.1")][0] | .coin_pub' ) # Find the denom of freshc export fresh_denom=$(echo "$coins" | jq -r --arg rrc "$rrc" \ '[.coins[] | select((.refresh_parent_coin_pub == $rrc) and .denom_value == "TESTKUDOS:0.1")][0] | .denom_pub_hash' ) echo "Coin ${freshc} of denomination ${fresh_denom} is the result of the refresh" # Find all other coins, which will be suspended export susp=$(echo "$coins" | jq --arg freshc "$freshc" '[.coins[] | select(.coin_pub != $freshc) | .coin_pub]') # Do the revocation of freshc echo "Revoking ${fresh_denom} (to affect coin ${freshc})" taler-exchange-keyup -c $CONF -o e2a3.dat -r $fresh_denom taler-auditor-sign -c $CONF -u $AUDITOR_URL -r e2a3.dat -o a2e3.dat -m $MASTER_PUB rm e2a3.dat mv a2e3.dat $ABD # Restart the exchange... kill -SIGUSR1 $EXCHANGE_PID sleep 1 # give exchange time to re-scan data # Now we suspend the other coins, so later we will pay with the recouped coin taler-wallet-cli $TIMETRAVEL --wallet-db=$WALLET_DB advanced suspend-coins "$susp" # Update exchange /keys so recoup gets scheduled taler-wallet-cli $TIMETRAVEL --wallet-db=$WALLET_DB exchanges update \ -f $EXCHANGE_URL # Block until scheduled operations are done taler-wallet-cli $TIMETRAVEL --wallet-db=$WALLET_DB run-until-done echo "Restarting merchant (so new keys are known)" kill -TERM $MERCHANT_PID taler-merchant-httpd -c $CONF -L INFO 2> taler-merchant-httpd.log & MERCHANT_PID=$! # Wait for merchant to be again available for n in `seq 1 50` do echo -n "." sleep 0.1 OK=0 # merchant wget http://localhost:9966/ -o /dev/null -O /dev/null >/dev/null || continue OK=1 break done # Now we buy something, only the coins resulting from recoup+refresh will be # used, as other ones are suspended taler-wallet-cli $TIMETRAVEL --wallet-db=$WALLET_DB testing test-pay \ -m $MERCHANT_URL -k sandbox \ -a "TESTKUDOS:0.02" -s "bar" taler-wallet-cli $TIMETRAVEL --wallet-db=$WALLET_DB run-until-done echo "SUCCESS: Bought something with refresh-recouped coin" rm -r "$TMP_DIR" exit 0