View Issue Details

IDProjectCategoryView StatusLast Update
0004932Talerexchange API (HTTP specification)public2017-06-06 14:18
ReporterChristian GrothoffAssigned ToChristian Grothoff 
PriorityhighSeveritymajorReproducibilityN/A
Status closedResolutionfixed 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product VersionSVN HEAD 
Target Version0.3Fixed in Version0.3 
Summary0004932: signature over wire fees needs to include wire method
DescriptionCurrently, we sign over the date range and the fee; but we should include the (hash of) the wire method as well, to prevent signature lifting to different context (security issue!)
TagsNo tags attached.

Relationships

related to 0004934 closedFlorian Dold show new wire transfer fee on withdrawal 
related to 0004937 closedChristian Grothoff wire fees should be returned from the libtalerexchange /wire API 

Activities

Christian Grothoff

2017-03-04 18:09

manager   ~0011887

Specification updated in 7bf82f8..9608f22

Christian Grothoff

2017-03-04 18:10

manager   ~0011888

Implemented in e3dcc27..1c84b3d (note that libtalerexchange does not support the fees yet, that is 0004937 so no changes there).

Issue History

Date Modified Username Field Change
2017-03-04 16:44 Christian Grothoff New Issue
2017-03-04 16:44 Christian Grothoff Status new => assigned
2017-03-04 16:44 Christian Grothoff Assigned To => Christian Grothoff
2017-03-04 16:54 Christian Grothoff Relationship added related to 0004934
2017-03-04 17:00 Christian Grothoff Relationship added related to 0004937
2017-03-04 18:09 Christian Grothoff Note Added: 0011887
2017-03-04 18:10 Christian Grothoff Status assigned => resolved
2017-03-04 18:10 Christian Grothoff Resolution open => fixed
2017-03-04 18:10 Christian Grothoff Fixed in Version => 0.3
2017-03-04 18:10 Christian Grothoff Note Added: 0011888
2017-06-06 14:18 Christian Grothoff Status resolved => closed