View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0003882 | Taler | wallet (WebExtension) | public | 2015-07-08 11:08 | 2019-12-26 20:37 |
| Reporter | Marcello Stanisci | Assigned To | Marcello Stanisci | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | high | Severity | feature | Reproducibility | have not tried |
| Status | closed | Resolution | fixed | ||
| Product Version | 0.0 | ||||
| Target Version | 0.0 | Fixed in Version | 0.0 | ||
| Summary | 0003882: Verify signatures on mint's keys | ||||
| Description | Currently, the wallet gets the mint's key in response to /keys and saves them in its database without verifying the signatures on those key. TBD. | ||||
| Tags | No tags attached. | ||||
| the JSON entry for a denomination key does NOT indicate the spending duration of the corresponding denomination key. This value is required to define the 'expire_spend' field in the structure whose signature will be verified by the wallet. It's just the mint's config file that holds this value. Shall that be included in the JSON? | |
| Yes. | |
| Added in ac0129c..88a91a5. The auditors' signatures verification is not tested, but uses the same routines as the verification on mint keys; it's just the hash mapping on RSA keys that is untested. | |
| The first comment says what is missing from the mint. | |
| I'm confused, taler-mint-httpd_keystate.c:153 does add 'expire_spend' to the JSON, and api-mint.rst:122 does state this for the specification. What are you missing from the mint? | |
| JSON's 'stamp_expire_deposit' indicates the same value occurring in the field 'expire_spend' of 'struct TALER_DenominationKeyValidityPS'. | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2015-07-08 11:08 | Marcello Stanisci | New Issue | |
| 2015-07-08 11:08 | Marcello Stanisci | Status | new => assigned |
| 2015-07-08 11:08 | Marcello Stanisci | Assigned To | => Marcello Stanisci |
| 2015-09-19 18:45 | Christian Grothoff | Priority | normal => high |
| 2015-09-19 18:45 | Christian Grothoff | Product Version | => 0.0 |
| 2015-09-19 18:45 | Christian Grothoff | Target Version | => 0.0 |
| 2015-10-01 09:13 | Marcello Stanisci | Note Added: 0009668 | |
| 2015-10-01 19:22 | Christian Grothoff | Note Added: 0009670 | |
| 2015-10-02 08:32 | Marcello Stanisci | Note Added: 0009678 | |
| 2015-10-02 08:32 | Marcello Stanisci | Status | assigned => informing |
| 2015-10-02 08:32 | Marcello Stanisci | Resolution | open => fixed |
| 2015-10-02 15:20 | Christian Grothoff | Status | informing => closed |
| 2015-10-02 15:20 | Christian Grothoff | Fixed in Version | => 0.0 |
| 2015-10-02 15:39 | Marcello Stanisci | Assigned To | Marcello Stanisci => Christian Grothoff |
| 2015-10-02 15:39 | Marcello Stanisci | Note Added: 0009684 | |
| 2015-10-02 15:39 | Marcello Stanisci | Status | closed => feedback |
| 2015-10-02 15:39 | Marcello Stanisci | Resolution | fixed => reopened |
| 2015-10-03 16:04 | Christian Grothoff | Status | feedback => assigned |
| 2015-10-03 16:07 | Christian Grothoff | Note Added: 0009685 | |
| 2015-10-03 16:07 | Christian Grothoff | Status | assigned => feedback |
| 2015-10-03 16:08 | Christian Grothoff | Assigned To | Christian Grothoff => Marcello Stanisci |
| 2015-10-05 07:23 | Marcello Stanisci | Note Added: 0009693 | |
| 2015-10-05 07:23 | Marcello Stanisci | Status | feedback => assigned |
| 2015-10-05 07:23 | Marcello Stanisci | Status | assigned => informing |
| 2015-10-05 07:23 | Marcello Stanisci | Resolution | reopened => fixed |
| 2015-10-14 14:58 | Christian Grothoff | Status | informing => closed |
| 2019-12-26 20:37 | Florian Dold | Category | wallet (browser-based) => wallet (WebExtensions) |
| 2023-04-13 18:37 | Florian Dold | Category | wallet (WebExtensions) => wallet (WebExtension) |