From be4b567666c0f05a68be01ec20b2e81212a32a2f Mon Sep 17 00:00:00 2001 From: Thien-Thi Nguyen Date: Mon, 11 Jan 2021 00:24:30 -0500 Subject: mention socket perms and same-group requirement This reflects the result of an email discussion between FD and CG. --- taler-exchange-manual.rst | 3 +++ 1 file changed, 3 insertions(+) (limited to 'taler-exchange-manual.rst') diff --git a/taler-exchange-manual.rst b/taler-exchange-manual.rst index 2d476711..79a3bdf0 100644 --- a/taler-exchange-manual.rst +++ b/taler-exchange-manual.rst @@ -234,6 +234,9 @@ integration support. Functionality ^^^^^^^^^^^^^ +The UNIX domain sockets have mode 0620 (u+rw, g+w). The exchange process +MUST be in the same group as the the crypto helper processes. + The two helper processes will create the required private keys, and allow anyone with access to the UNIX domain socket to sign arbitrary messages with the keys or to inform them about a key being revoked. The helper processes -- cgit v1.2.3 From 18cb46b2b6f6588eceaf83e63d1deff87630fd08 Mon Sep 17 00:00:00 2001 From: Thien-Thi Nguyen Date: Mon, 11 Jan 2021 02:08:15 -0500 Subject: add link to taler.conf(5) for "duration" values --- taler-exchange-manual.rst | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'taler-exchange-manual.rst') diff --git a/taler-exchange-manual.rst b/taler-exchange-manual.rst index 79a3bdf0..e470fd89 100644 --- a/taler-exchange-manual.rst +++ b/taler-exchange-manual.rst @@ -478,7 +478,9 @@ must then have the following options: - ``RSA_KEYSIZE``: How many bits should the RSA modulus (product of the two primes) have for this type of coin. - +See :doc:`taler.conf(5) manpages/taler.conf.5` for information on *duration* values +(i.e. ``DURATION_WITHDRAW`` and ``DURATION_SPEND``above, +and ``OVERLAP_DURATION`` and ``DURATION`` below). Additionally, there are two global configuration options of note: - ``[taler-helper-crypto-rsa/OVERLAP_DURATION]``: What is the overlap of the -- cgit v1.2.3 From 6dcd6ad89ced216e04d1e1074279aabc14be72a7 Mon Sep 17 00:00:00 2001 From: Thien-Thi Nguyen Date: Mon, 11 Jan 2021 02:12:01 -0500 Subject: add link to taler.conf(5) for "duration" values (try 2) --- taler-exchange-manual.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'taler-exchange-manual.rst') diff --git a/taler-exchange-manual.rst b/taler-exchange-manual.rst index e470fd89..fe3eab6c 100644 --- a/taler-exchange-manual.rst +++ b/taler-exchange-manual.rst @@ -478,7 +478,7 @@ must then have the following options: - ``RSA_KEYSIZE``: How many bits should the RSA modulus (product of the two primes) have for this type of coin. -See :doc:`taler.conf(5) manpages/taler.conf.5` for information on *duration* values +See :doc:`manpages/taler.conf.5` for information on *duration* values (i.e. ``DURATION_WITHDRAW`` and ``DURATION_SPEND``above, and ``OVERLAP_DURATION`` and ``DURATION`` below). Additionally, there are two global configuration options of note: -- cgit v1.2.3 From 8ab27ec17bc7889f07ab0c1487b46f5d206e8124 Mon Sep 17 00:00:00 2001 From: Thien-Thi Nguyen Date: Mon, 11 Jan 2021 02:12:51 -0500 Subject: fix typo: add space after markup --- taler-exchange-manual.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'taler-exchange-manual.rst') diff --git a/taler-exchange-manual.rst b/taler-exchange-manual.rst index fe3eab6c..19ca7a48 100644 --- a/taler-exchange-manual.rst +++ b/taler-exchange-manual.rst @@ -479,7 +479,7 @@ must then have the following options: primes) have for this type of coin. See :doc:`manpages/taler.conf.5` for information on *duration* values -(i.e. ``DURATION_WITHDRAW`` and ``DURATION_SPEND``above, +(i.e. ``DURATION_WITHDRAW`` and ``DURATION_SPEND`` above, and ``OVERLAP_DURATION`` and ``DURATION`` below). Additionally, there are two global configuration options of note: -- cgit v1.2.3 From 99cabcd488e393bc8c7f00c64e6916d108723ece Mon Sep 17 00:00:00 2001 From: Thien-Thi Nguyen Date: Mon, 11 Jan 2021 02:13:24 -0500 Subject: fix typo: indent --- taler-exchange-manual.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'taler-exchange-manual.rst') diff --git a/taler-exchange-manual.rst b/taler-exchange-manual.rst index 19ca7a48..e75303f4 100644 --- a/taler-exchange-manual.rst +++ b/taler-exchange-manual.rst @@ -487,7 +487,7 @@ Additionally, there are two global configuration options of note: withdrawal timespan for denomination keys? The value given here must be smaller than any of the ``DURATION_WITHDRAW`` values for any of the coins. -- ``[taler-helper-crypto-rsa/LOOKAHEAD_SIGN]``: For how far into the future +- ``[taler-helper-crypto-rsa/LOOKAHEAD_SIGN]``: For how far into the future should denomination keys be pre-generated? This allows the exchange and auditor operators to download, offline-sign, and upload denomination key signatures for denomination keys that will be used in the future by the -- cgit v1.2.3 From 675294b4f107a2026fdc3858850323ff10e6f2bf Mon Sep 17 00:00:00 2001 From: Thien-Thi Nguyen Date: Mon, 11 Jan 2021 03:08:06 -0500 Subject: add several links to various docs/manpages --- taler-exchange-manual.rst | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) (limited to 'taler-exchange-manual.rst') diff --git a/taler-exchange-manual.rst b/taler-exchange-manual.rst index e75303f4..879f9ad2 100644 --- a/taler-exchange-manual.rst +++ b/taler-exchange-manual.rst @@ -441,6 +441,7 @@ permissions. Those permissions are only required for this step (which may have to be repeated when upgrading a deployment). Afterwards, during normal operation, permissions to ``CREATE`` or ``ALTER`` tables are not required by any of the Taler exchange processes and thus should not be granted. +For more information, see :doc:`manpages/taler-exchange-dbinit.1`. .. _Coins-denomination-keys: @@ -654,9 +655,8 @@ follows to enable a wire account: $ taler-exchange-offline enable-account payto://iban/CH9300762011623852957 The resulting JSON output must be uploaded to the exchange using -``taler-exchange-offline upload``. For details, see the man -page on ``taler-exchange-offline``. -ttn: please turn this into a link! +``taler-exchange-offline upload``. +For details, see :doc:`manpages/taler-exchange-offline.1`. .. _Wire-fee-structure: @@ -822,7 +822,7 @@ to provision the signatures to the exchange. At this point, the exchange will be able to use those keys, but wallets and merchants may not yet trust them! Thus, the next step is for the auditor to affirm that they are auditing this exchange. Details about -this are described in the auditor manual (ttn: add link, please!). +this are described in :doc:`taler-auditor-manual`. The simplistic (without using offline keys for the auditor) way to do this would be: @@ -831,6 +831,8 @@ to do this would be: $ taler-auditor-offline download sign upload +For more information, see :doc:`manpages/taler-auditor-offline.1`. + Private key storage ------------------- -- cgit v1.2.3