View Issue Details

IDProjectCategoryView StatusLast Update
0004855Talerotherpublic2017-01-13 15:03
ReporterFlorian Dold Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionno change required 
Product Version0.3 
Target Version0.3Fixed in Version0.3 
Summary0004855: TALER_ContractPS should also sign over the instance name
Description... otherwise the backend can't verify that the instance in the deposit permission from the wallet matches the instance in the contract.

Working around this bug would require the merchant to also do contract restoration in the "/pay" handler, which we don't want for simplicity/efficiency reasons.

Only issue here is that the instance name is variable length, so we need to either find some appropriate size limit, make the struct dynamically sized or sign over a hash of the instance name.
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2017-01-13 14:39

manager   ~0011636

Yuck, that's very messy. ContractPS should really not have anything to do with instances, as that's really something internal between frontend/backend on the merchant side, not something that customers should be exposed to. Let's discuss this.

Christian Grothoff

2017-01-13 15:03

manager   ~0011637

No longer relevant, better solution planned.

Issue History

Date ModifiedUsernameFieldChange
2017-01-12 14:16Florian DoldNew Issue
2017-01-13 14:34Florian DoldProduct Version => 0.3
2017-01-13 14:34Florian DoldTarget Version => 0.3
2017-01-13 14:39Christian GrothoffNote Added: 0011636
2017-01-13 15:03Christian GrothoffAssigned To => Christian Grothoff
2017-01-13 15:03Christian GrothoffStatusnew => closed
2017-01-13 15:03Christian GrothoffResolutionopen => no change required
2017-01-13 15:03Christian GrothoffFixed in Version => 0.3
2017-01-13 15:03Christian GrothoffNote Added: 0011637