summaryrefslogtreecommitdiff
path: root/src/exchange/taler-exchange-httpd_keys.c
AgeCommit message (Collapse)Author
2022-07-06-fix typosChristian Grothoff
2022-07-01-exchange_api_batch_deposit.c compilesChristian Grothoff
2022-06-29version bump due to new /keys responseÖzgür Kesim
2022-06-29-actually fix compatibility break from OecChristian Grothoff
2022-06-29-trying to fix demoChristian Grothoff
2022-06-29-trying to fix demoChristian Grothoff
2022-06-29-fix /keys initialization DB logicChristian Grothoff
2022-06-29-style fixChristian Grothoff
2022-06-27better api for parsing a denomination groupÖzgür Kesim
2022-06-27[new /keys response] added proper hash verificationÖzgür Kesim
- Running XOR of all SHA-512 hashes of each denomination's public key is compared against the "hash" value in the JSON blob. - Fixed a bug during creation of the running XOR.
2022-06-26[new /keys response] create and parse denomination implementedÖzgür Kesim
- /keys response now contains signed denomintations - hashes of denominations now XOR'ed per group into a single hash-code - final hash-code is now XOR of all group hash codes - final hash-code is signed - lib/exchange_api_handle support for new "denominations" implemented - parses array of denomation groups - creates running xor of hashes - verifies signature at the end - previous diff/merge logic for keys remains intact.
2022-06-24-cleanup commentsÖzgür Kesim
2022-06-23first steps towards new /keys response: grouped denominations addedÖzgür Kesim
2022-06-14-fix commentsChristian Grothoff
2022-05-30-sketch API for RSA parallel signingChristian Grothoff
2022-05-17-check for ETag in request, generate 304 if applicableChristian Grothoff
2022-05-17keep ETag aroundChristian Grothoff
2022-05-17add ETag to /keys responseChristian Grothoff
2022-05-16improve cache control support for /wire, /keys and legalChristian Grothoff
2022-05-12add Etag and 'expires' to /wireChristian Grothoff
2022-04-26various age restriction fixes, some of them half-bakedFlorian Dold
2022-04-23-work on p2p paymentsChristian Grothoff
2022-03-29centralize exchange online signature logicChristian Grothoff
2022-03-20towards support for new reserve history/status APIsChristian Grothoff
2022-03-20return new global fees from /keysChristian Grothoff
2022-03-17more explicit cipher usage countersMarco Boss
2022-03-14add metrics for number of crypto operationsMarco Boss
2022-03-02-refactor TALER_AgeMask.mask -> TALER_AgeMask.bitsÖzgür Kesim
also: fix off-by-one in TALER_age_restriction_commit
2022-02-21-big renaming of structs for consistent naming with P suffixChristian Grothoff
2022-02-20-ensure different HKDF is used in melt vs. withdrawChristian Grothoff
2022-02-17-fix bad choice during mergeChristian Grothoff
2022-02-17-fix CS nonce reuse check logicChristian Grothoff
2022-02-16[age restriction] progress 14/n - withdraw and depositÖzgür Kesim
Age restriction support for - withdraw is done and tested - deposit is done and tested TODOs: - melt/refresh/reveal - link ------ Added functions - TALER_age_restriction_commit - TALER_age_commitment_derive - TALER_age_commitment_hash - TALER_age_restriction_commitment_free_inside - Hash of age commitment passed around API boundaries Exchangedb adjustments for denominations - all prepared statements re: denominations now handle age_mask - signature parameters adjusted Hash and signature verification of /keys adjusted - Hashes of (normal) denominations and age-restricted denominations are calculated seperately - The hash of the age-restricted ones will then be added to the other hash - The total hash is signed/verified Tests for withdraw with age restriction added - TALER_EXCHANGE_DenomPublickey now carries age_mask - TALER_TESTING_cmd_withdraw_amount* takes age parameter - TALER_TESTING_find_pk takes boolean age_restricted - WithdrawState carries age_commitment and its hash - withdraw_run derives new age commitment, if applicable - Added age parameter to testing (13 as example) Various Fixes and changes - Fixes of post handler for /management/extensions - Fixes for offline tool extensions signing - Slight refactoring of extensions - Age restriction extension simplified - config is now global to extension - added global TEH_age_restriction_enabled and TEH_age_mask in taler-exchange-httpd - helper functions and macros introduced
2022-02-12-swap argument/rval for nicer codeChristian Grothoff
2022-02-11-simplify: nonce no longer hashedChristian Grothoff
2022-02-11-fix use of uninit memory in testChristian Grothoff
2022-02-09implement CS refresh-reveal signing, simplify TEH keys logicChristian Grothoff
2022-02-09-fix leakChristian Grothoff
2022-02-07 only one helper must be OKChristian Grothoff
2022-02-07-style fixesChristian Grothoff
2022-02-07-wake clients if we have 0 dksChristian Grothoff
2022-02-07-rename festChristian Grothoff
2022-02-04fixed nonce check, renamed WithdrawNonceGian Demarmels
2022-02-04implement feedbackLucien Heuzeveldt
2022-02-04change TEH_keys_denomination_sign message parameterLucien Heuzeveldt
2022-02-04implement withdraw (nonce reuse check missing)Lucien Heuzeveldt
2022-02-04implement CS key handling and csr endpointLucien Heuzeveldt
2022-01-23[age_restriction] progress 13/nÖzgür Kesim
- major refactoring of extensions - extensions live now in a separate library, libtalerextensions - refactored all components using age_restriction accordingly - plumbing for plugin support for extensions roughly layed down
2022-01-22improvements in extension handlingÖzgür Kesim
- extensions_sig is needed globally - keep original json with config of extension - fixed various bugs re: extension handling
2022-01-08[age restriction] progress 10/nÖzgür Kesim
More work towards support for extensions: - Prepared statements and DB-plugin-functions for setting and retrieving configurations from the database added. - primitive "registry" of extensions for age restrictions and peer2peer (stub) - TALER_Extensions now with FP for parsing, setting and converting a configuration. - /management/extensions handler now verifies signature of the (opaque) json object for all extensions. - /management/extensions handler calls the FP in the corrensponding TALER_Extension for parsing and setting the configuration of a particular extension More work towards age restriction: - TALER_Extensions interfaces for config-parser, -setter and converter implemented for age restriction - DB event handler now retrieves config from database, parses it and sets it (the age mask) in the global extension. - load_age_mask now loads age mask from the global extension (and not from the config file) - add age_restricted_denoms to /keys response