View Issue Details

IDProjectCategoryView StatusLast Update
0005447Talerauditorpublic2019-12-20 18:12
ReporterFlorian Dold Assigned ToMarcello Stanisci Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status closedResolutionfixed 
Product Versiongit (master) 
Target Version0.6Fixed in Version0.6 
Summary0005447: auditor should accept samples of deposit confirmations from merchants
Description... to then be able to revoke signing keys, if deposit confirmations were observed that do not match or even contradict the exchange's database.
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2018-10-28 10:41

manager   ~0013292

The HTTP API has been specified and is (largely) implemented (but not tested).
Mainly missing are:
(0) (more) testing of the API
(1) actual use during auditing
(2) deployment of an HTTPd for the auditor
(3) actual use by the merchants

Christian Grothoff

2018-11-04 16:39

manager   ~0013319

(1) is now done, patch attached, could not yet push as git.taler.net:22 seems down...

Christian Grothoff

2019-01-10 15:20

manager   ~0013455

Started with logic to call auditor for dc's in exchange-lib in 2a01aaa9..12123a7a (logic incomplete).

Christian Grothoff

2019-01-13 16:49

manager   ~0013457

91566dde..7cc7660c concludes the implementation (step #3).

However, more testing would still be good. Marcello: please write a test so that it performs a few deposit operations (10x) with an exchange (httpd) and auditor (httpd), *and* subsequently runs the taler-auditor so that we have a high chance of covering the new logic.

Marcello Stanisci

2019-01-30 22:01

reporter   ~0013527

By better looking at the code, commit 537af4631d922b2190b3a3ce8fb.. does implement the test requested in the previous note. In fact, the batch named "massive-deposit-confirms" runs the 10x deposit operations and the one called "normal-auditor" runs taler-auditor.

Marcello Stanisci

2019-01-30 22:21

reporter   ~0013528

7b6488d7d77e5da3e7 adds a taler-auditor test command ("massive-auditor") right inside the block with the 10x deposit operations, so this should be solved now.

Issue History

Date ModifiedUsernameFieldChange
2018-09-28 08:47Florian DoldNew Issue
2018-09-28 08:47Florian DoldStatusnew => assigned
2018-09-28 08:47Florian DoldAssigned To => Christian Grothoff
2018-10-06 13:08Christian GrothoffSeverityminor => feature
2018-10-28 10:41Christian GrothoffNote Added: 0013292
2018-11-04 16:39Christian GrothoffNote Added: 0013319
2018-11-17 23:33Christian GrothoffProduct Version => git (master)
2018-11-17 23:33Christian GrothoffTarget Version => 0.7.1
2019-01-10 15:20Christian GrothoffNote Added: 0013455
2019-01-13 16:49Christian GrothoffNote Added: 0013457
2019-01-13 16:49Christian GrothoffAssigned ToChristian Grothoff => Marcello Stanisci
2019-01-30 22:01Marcello StanisciNote Added: 0013527
2019-01-30 22:21Marcello StanisciNote Added: 0013528
2019-01-30 22:25Marcello StanisciStatusassigned => informing
2019-01-30 22:25Marcello StanisciResolutionopen => fixed
2019-01-31 18:33Christian GrothoffFixed in Version => 0.6
2019-01-31 18:33Christian GrothoffTarget Version0.7.1 => 0.6
2019-12-20 18:12Christian GrothoffStatusinforming => closed