View Issue Details

IDProjectCategoryView StatusLast Update
0004855Talerotherpublic2017-01-13 16:03
ReporterFlorian Dold Assigned ToChristian Grothoff  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionno change required 
Product Version0.3 
Target Version0.3Fixed in Version0.3 
Summary0004855: TALER_ContractPS should also sign over the instance name
Description... otherwise the backend can't verify that the instance in the deposit permission from the wallet matches the instance in the contract.

Working around this bug would require the merchant to also do contract restoration in the "/pay" handler, which we don't want for simplicity/efficiency reasons.

Only issue here is that the instance name is variable length, so we need to either find some appropriate size limit, make the struct dynamically sized or sign over a hash of the instance name.
TagsNo tags attached.

Activities

Christian Grothoff

2017-01-13 15:39

manager   ~0011636

Yuck, that's very messy. ContractPS should really not have anything to do with instances, as that's really something internal between frontend/backend on the merchant side, not something that customers should be exposed to. Let's discuss this.

Christian Grothoff

2017-01-13 16:03

manager   ~0011637

No longer relevant, better solution planned.

Issue History

Date Modified Username Field Change
2017-01-12 15:16 Florian Dold New Issue
2017-01-13 15:34 Florian Dold Product Version => 0.3
2017-01-13 15:34 Florian Dold Target Version => 0.3
2017-01-13 15:39 Christian Grothoff Note Added: 0011636
2017-01-13 16:03 Christian Grothoff Assigned To => Christian Grothoff
2017-01-13 16:03 Christian Grothoff Status new => closed
2017-01-13 16:03 Christian Grothoff Resolution open => no change required
2017-01-13 16:03 Christian Grothoff Fixed in Version => 0.3
2017-01-13 16:03 Christian Grothoff Note Added: 0011637