View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0006943 | Taler | documentation | public | 2021-07-23 11:24 | 2021-08-24 14:22 |
| Reporter | Christian Grothoff | Assigned To | Resolution deadline | ||
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | urgent | Severity | text | Reproducibility | N/A |
| Status | closed | Resolution | fixed | ||
| Platform | i7 | OS | Debian GNU/Linux | OS Version | squeeze |
| Product Version | git (master) | ||||
| Target Version | 0.8 | Fixed in Version | 0.8 | ||
| Summary | 0006943: taler merchant manual should inform admins about private keys in database | ||||
| Description | The Taler merchant backend stores private keys in the database. This should be made explicit in the Taler merchant operator manual, explaining that the database contains sensitive business (and customer) data including key material, and that hence backups of the database should be properly encrypted and/or otherwise secured against illicit access. | ||||
| Tags | No tags attached. | ||||
| (Note: this should probably be mentioned in general in the manual, but also again specifically if/when/where we discuss backups.) | |
| See commit c8676652f40d5aae733052ba95dd17b56ca4c6ce for a start. If that's okay, next step is to convert the blurb into a frag and include it in various places. | |
| I believe we can close this bug now, due to these recent commits: c8676652f4 2021-07-30 add note re database storing private keys / backups SHOULD be encrypted 1081f8bd20 2021-07-30 fix typo: s/unuathorized/unauthorized/ 95ab178523 2021-07-30 move note re database to frags 1fd89a2e23 2021-07-31 include frag re database storing sensitive data e6c3b7bd3a 2021-07-31 include frag re database storing sensitive data If there are other places where this note should be included, please re-open. | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2021-07-23 11:24 | Christian Grothoff | New Issue | |
| 2021-07-23 11:24 | Christian Grothoff | Status | new => assigned |
| 2021-07-23 11:24 | Christian Grothoff | Assigned To | => ttn |
| 2021-07-23 11:24 | Christian Grothoff | Note Added: 0018006 | |
| 2021-07-31 03:00 | Note Added: 0018036 | ||
| 2021-07-31 04:36 | Status | assigned => informing | |
| 2021-07-31 04:36 | Resolution | open => fixed | |
| 2021-07-31 04:36 | Note Added: 0018037 | ||
| 2021-07-31 05:53 | Christian Grothoff | Product Version | => git (master) |
| 2021-07-31 05:53 | Christian Grothoff | Fixed in Version | => 0.8 |
| 2021-07-31 05:53 | Christian Grothoff | Target Version | => 0.8 |
| 2021-08-24 14:22 | Christian Grothoff | Status | informing => closed |