View Issue Details

IDProjectCategoryView StatusLast Update
0008576Talerwallet-corepublic2026-08-10 10:31
ReporterFlorian Dold Assigned ToFlorian Dold Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityminorReproducibilityhave not tried
Status informingResolutionfixed 
Target Version1.6Fixed in Version1.6 
Summary0008576: handle change of master public key (as well as currency, fees, ...) gracefully [estimate: 8d+]
DescriptionCurrently the wallet has coins referencing the exchange via the base URL. Instead, it should only reference the denomination.

When an exchange changes its base URL, new coins will be shown in regional-currency scope.

The user should also be warned on next withdrawal that there was a public key change. There should also be a warning.
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Florian Dold

2026-08-07 11:55

manager   ~0029403

commit 4f243f609d883c38c7fade3486cad5543f5be904
Author: Florian Dold <dold@taler.net>
Date: Fri Aug 7 02:53:40 2026 +0200

    wallet-core: handle a change of the exchange's master public key
    
    The wallet refused any /keys whose master public key or currency differed from
    the stored one, which parked the entry in UnavailableUpdate for good and took
    the coins already withdrawn with it. It now adopts the new key set so the entry
    keeps working, records the one it replaced, and withholds only withdrawing --
    the account a withdrawal pays into is signed by that key, so a URL that changed
    hands could otherwise redirect the transfer. Coins under the superseded key
    keep their own scope and are frozen unless the exchange still offers their
    denominations.
    
    Denominations, coin availability and coins are identified by the key that
    signed them rather than by the exchange's base URL, which is what makes two key
    sets able to coexist at one URL.
    
    Issue: https://bugs.taler.net/n/8576

Issue History

Date ModifiedUsernameFieldChange
2024-03-05 14:26Florian DoldNew Issue
2024-03-05 14:26Florian DoldStatusnew => assigned
2024-03-05 14:26Florian DoldAssigned To => Florian Dold
2024-03-05 23:00Florian DoldTarget Version0.10 => 0.11
2024-03-05 23:00Florian DoldTarget Version0.11 => post-1.0
2025-04-23 23:01Christian GrothoffAssigned ToFlorian Dold =>
2025-04-23 23:01Christian GrothoffStatusassigned => implementing
2026-08-07 11:55Florian DoldNote Added: 0029403
2026-08-07 11:55Florian DoldAssigned To => Florian Dold
2026-08-07 11:55Florian DoldStatusimplementing => informing
2026-08-07 11:55Florian DoldResolutionopen => fixed
2026-08-10 10:31Christian GrothoffFixed in Version => 1.6
2026-08-10 10:31Christian GrothoffTarget Versionpost-1.0 => 1.6