View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0003882 | Taler | wallet (WebExtension) | public | 2015-07-08 13:08 | 2019-12-26 21:37 |
| Reporter | Marcello Stanisci | Assigned To | Marcello Stanisci | ||
| Priority | high | Severity | feature | Reproducibility | have not tried |
| Status | closed | Resolution | fixed | ||
| Product Version | 0.0 | ||||
| Target Version | 0.0 | Fixed in Version | 0.0 | ||
| Summary | 0003882: Verify signatures on mint's keys | ||||
| Description | Currently, the wallet gets the mint's key in response to /keys and saves them in its database without verifying the signatures on those key. TBD. | ||||
| Tags | No tags attached. | ||||
|
|
the JSON entry for a denomination key does NOT indicate the spending duration of the corresponding denomination key. This value is required to define the 'expire_spend' field in the structure whose signature will be verified by the wallet. It's just the mint's config file that holds this value. Shall that be included in the JSON? |
|
|
Yes. |
|
|
Added in ac0129c..88a91a5. The auditors' signatures verification is not tested, but uses the same routines as the verification on mint keys; it's just the hash mapping on RSA keys that is untested. |
|
|
The first comment says what is missing from the mint. |
|
|
I'm confused, taler-mint-httpd_keystate.c:153 does add 'expire_spend' to the JSON, and api-mint.rst:122 does state this for the specification. What are you missing from the mint? |
|
|
JSON's 'stamp_expire_deposit' indicates the same value occurring in the field 'expire_spend' of 'struct TALER_DenominationKeyValidityPS'. |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2015-07-08 13:08 | Marcello Stanisci | New Issue | |
| 2015-07-08 13:08 | Marcello Stanisci | Status | new => assigned |
| 2015-07-08 13:08 | Marcello Stanisci | Assigned To | => Marcello Stanisci |
| 2015-09-19 20:45 | Christian Grothoff | Priority | normal => high |
| 2015-09-19 20:45 | Christian Grothoff | Product Version | => 0.0 |
| 2015-09-19 20:45 | Christian Grothoff | Target Version | => 0.0 |
| 2015-10-01 11:13 | Marcello Stanisci | Note Added: 0009668 | |
| 2015-10-01 21:22 | Christian Grothoff | Note Added: 0009670 | |
| 2015-10-02 10:32 | Marcello Stanisci | Note Added: 0009678 | |
| 2015-10-02 10:32 | Marcello Stanisci | Status | assigned => resolved |
| 2015-10-02 10:32 | Marcello Stanisci | Resolution | open => fixed |
| 2015-10-02 17:20 | Christian Grothoff | Status | resolved => closed |
| 2015-10-02 17:20 | Christian Grothoff | Fixed in Version | => 0.0 |
| 2015-10-02 17:39 | Marcello Stanisci | Assigned To | Marcello Stanisci => Christian Grothoff |
| 2015-10-02 17:39 | Marcello Stanisci | Note Added: 0009684 | |
| 2015-10-02 17:39 | Marcello Stanisci | Status | closed => feedback |
| 2015-10-02 17:39 | Marcello Stanisci | Resolution | fixed => reopened |
| 2015-10-03 18:04 | Christian Grothoff | Status | feedback => assigned |
| 2015-10-03 18:07 | Christian Grothoff | Note Added: 0009685 | |
| 2015-10-03 18:07 | Christian Grothoff | Status | assigned => feedback |
| 2015-10-03 18:08 | Christian Grothoff | Assigned To | Christian Grothoff => Marcello Stanisci |
| 2015-10-05 09:23 | Marcello Stanisci | Note Added: 0009693 | |
| 2015-10-05 09:23 | Marcello Stanisci | Status | feedback => assigned |
| 2015-10-05 09:23 | Marcello Stanisci | Status | assigned => resolved |
| 2015-10-05 09:23 | Marcello Stanisci | Resolution | reopened => fixed |
| 2015-10-14 16:58 | Christian Grothoff | Status | resolved => closed |
| 2019-12-26 21:37 | Florian Dold | Category | wallet (browser-based) => wallet (WebExtensions) |
| 2023-04-13 20:37 | Florian Dold | Category | wallet (WebExtensions) => wallet (WebExtension) |
