View Issue Details

IDProjectCategoryView StatusLast Update
0004932Talerspecificationpublic2024-01-12 13:03
ReporterChristian Grothoff Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PriorityhighSeveritymajorReproducibilityN/A
Status closedResolutionfixed 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product Versiongit (master) 
Target Version0.3Fixed in Version0.3 
Summary0004932: signature over wire fees needs to include wire method
DescriptionCurrently, we sign over the date range and the fee; but we should include the (hash of) the wire method as well, to prevent signature lifting to different context (security issue!)
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Relationships

related to 0004934 closedFlorian Dold show new wire transfer fee on withdrawal 
related to 0004937 closedChristian Grothoff wire fees should be returned from the libtalerexchange /wire API 

Activities

Christian Grothoff

2017-03-04 17:09

manager   ~0011887

Specification updated in 7bf82f8..9608f22

Christian Grothoff

2017-03-04 17:10

manager   ~0011888

Implemented in e3dcc27..1c84b3d (note that libtalerexchange does not support the fees yet, that is 0004937 so no changes there).

Issue History

Date ModifiedUsernameFieldChange
2017-03-04 15:44Christian GrothoffNew Issue
2017-03-04 15:44Christian GrothoffStatusnew => assigned
2017-03-04 15:44Christian GrothoffAssigned To => Christian Grothoff
2017-03-04 15:54Christian GrothoffRelationship addedrelated to 0004934
2017-03-04 16:00Christian GrothoffRelationship addedrelated to 0004937
2017-03-04 17:09Christian GrothoffNote Added: 0011887
2017-03-04 17:10Christian GrothoffStatusassigned => informing
2017-03-04 17:10Christian GrothoffResolutionopen => fixed
2017-03-04 17:10Christian GrothoffFixed in Version => 0.3
2017-03-04 17:10Christian GrothoffNote Added: 0011888
2017-06-06 12:18Christian GrothoffStatusinforming => closed
2024-01-12 13:03Christian GrothoffCategoryexchange API (HTTP specification) => specification