View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0009185 | Taler | exchange | public | 2024-09-11 18:01 | 2024-12-13 18:15 |
| Reporter | Christian Grothoff | Assigned To | Christian Grothoff | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | normal | Severity | tweak | Reproducibility | N/A |
| Status | closed | Resolution | fixed | ||
| Platform | i7 | OS | Debian GNU/Linux | OS Version | squeeze |
| Product Version | git (master) | ||||
| Target Version | 0.14 | Fixed in Version | 0.14 | ||
| Summary | 0009185: no signature from merchant_priv on /batch-deposit | ||||
| Description | With the recent KYC changes we assume that the merchant_pub signifies that the respective merchant agreed to the deposit, but actually the only signatures we (can) check are those from the coins. Now, usually the wallet should have checked that the merchant_sig under the contract is valid, but especially in the case where a wallet does a direct deposit, we cannot rely on this as obviously the wallet could put any random merchant_pub into the message signed by the coin_priv. Thus, we need to update the protocol to have the merchant include the merchant_sig in the /batch-deposit, thus assuring us that the owner of merchant_priv did agree to the deposit. | ||||
| Tags | No tags attached. | ||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2024-09-11 18:01 | Christian Grothoff | New Issue | |
| 2024-09-11 18:01 | Christian Grothoff | Status | new => assigned |
| 2024-09-11 18:01 | Christian Grothoff | Assigned To | => Christian Grothoff |
| 2024-09-11 18:14 | Christian Grothoff | Assigned To | Christian Grothoff => Florian Dold |
| 2024-09-11 18:14 | Christian Grothoff | Status | assigned => feedback |
| 2024-09-11 18:15 | Christian Grothoff | Assigned To | Florian Dold => Christian Grothoff |
| 2024-09-11 18:15 | Christian Grothoff | Status | feedback => assigned |
| 2024-09-11 21:08 | Christian Grothoff | Assigned To | Christian Grothoff => |
| 2024-09-11 21:08 | Christian Grothoff | Status | assigned => implementing |
| 2024-09-14 23:30 | Christian Grothoff | Target Version | 1.6 => 1.0 stretch goals |
| 2024-09-16 21:52 | Christian Grothoff | Target Version | 1.0 stretch goals => 1.3 |
| 2024-11-02 16:47 | Christian Grothoff | Target Version | 1.3 => 1.0 stretch goals |
| 2024-11-09 18:35 | Christian Grothoff | Assigned To | => Christian Grothoff |
| 2024-11-09 18:35 | Christian Grothoff | Status | implementing => assigned |
| 2024-11-09 19:36 | Christian Grothoff | Status | assigned => informing |
| 2024-11-09 19:36 | Christian Grothoff | Resolution | open => fixed |
| 2024-11-09 19:36 | Christian Grothoff | Fixed in Version | => 0.14 |
| 2024-11-09 19:36 | Christian Grothoff | Note Added: 0023681 | |
| 2024-11-09 19:36 | Christian Grothoff | Target Version | 1.0 stretch goals => 0.14 |
| 2024-12-13 18:15 | Christian Grothoff | Status | informing => closed |