summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFlorian Dold <florian.dold@gmail.com>2020-05-13 20:50:22 +0530
committerFlorian Dold <florian.dold@gmail.com>2020-05-13 20:50:22 +0530
commit4830df09a3b00355db5c91c1c9dcebf9fec41f90 (patch)
tree353f6b4cf14630d52b0f381ba5ccfdc70062eb0b
parentc6e6ea0d7e0253e7e395465db188c3c315399cb2 (diff)
downloaddocs-4830df09a3b00355db5c91c1c9dcebf9fec41f90.tar.gz
docs-4830df09a3b00355db5c91c1c9dcebf9fec41f90.tar.bz2
docs-4830df09a3b00355db5c91c1c9dcebf9fec41f90.zip
fix markup
-rw-r--r--libeufin/bank-transport-ebics.rst7
1 files changed, 7 insertions, 0 deletions
diff --git a/libeufin/bank-transport-ebics.rst b/libeufin/bank-transport-ebics.rst
index 1363fa3e..0d06f83b 100644
--- a/libeufin/bank-transport-ebics.rst
+++ b/libeufin/bank-transport-ebics.rst
@@ -21,20 +21,27 @@ The following steps are required to set up an EBICS bank transport:
systems have access to the account via EBICS)
2. The user enters the information from the list above in the setup dialog in the LibEuFin nexus (UI/CLI).
+
3. The LibEuFin nexus generates cryptographic key material (3 RSA key pairs)
+
5. The nexus sends the public keys electronically to the bank's EBICS server, together with the information
identifying the subscriber (PartnerID, UserID, SystemID).
+
6. The user print a document that contains the public key and hashes for all three key pairs.
The user then signs this document sends it to the bank (physically/scanned).
+
7. The bank receives the letter and verifies that the keys from the letter correspond
to the electronically sent keys. If they match, the bank sets the state of the
subscriber to "ready".
+
8. The user now has to wait until the bank has set the EBICS subscriber state to "ready".
There is no in-band notification for this, but the Nexus can try downloading the bank's
cryptographic parameters. This will only succeed once the EBICS subscriber is set to "ready"
by the bank.
+
9. The user should confirm the public keys of the bank received in the previous step.
Typically the bank gives the value of these public keys in an out-of-band channel.
+
10. Now the user can finally use the EBICS bank transport. The first step after finishing
the setup should be to import the bank accounts accessible for this EBICS subscriber.