diff options
Diffstat (limited to 'src/backend/taler-merchant-httpd_auditors.c')
| -rw-r--r-- | src/backend/taler-merchant-httpd_auditors.c | 239 |
1 files changed, 239 insertions, 0 deletions
diff --git a/src/backend/taler-merchant-httpd_auditors.c b/src/backend/taler-merchant-httpd_auditors.c new file mode 100644 index 00000000..84558ed0 --- /dev/null +++ b/src/backend/taler-merchant-httpd_auditors.c @@ -0,0 +1,239 @@ +/* + This file is part of TALER + (C) 2014, 2015 Christian Grothoff (and other contributing authors) + + TALER is free software; you can redistribute it and/or modify it under the + terms of the GNU General Public License as published by the Free Software + Foundation; either version 3, or (at your option) any later version. + + TALER is distributed in the hope that it will be useful, but WITHOUT ANY + WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR + A PARTICULAR PURPOSE. See the GNU General Public License for more details. + + You should have received a copy of the GNU General Public License along with + TALER; see the file COPYING. If not, If not, see <http://www.gnu.org/licenses/> +*/ +/** + * @file backend/taler-merchant-httpd_auditors.c + * @brief logic this HTTPD keeps for each mint we interact with + * @author Marcello Stanisci + * @author Christian Grothoff + */ +#include "platform.h" +#include "taler-merchant-httpd_auditors.h" + +/** + * Our representation of an auditor. + */ +struct Auditor +{ + /** + * Auditor's legal name. + */ + char *name; + + /** + * Auditor's URI. + */ + char *uri; + + /** + * Public key of the auditor. + */ + struct TALER_AuditorPublicKeyP public_key; + +}; + + +/** + * Array of the auditors this merchant is willing to accept. + */ +static struct Auditor *auditors; + +/** + * The length of the #auditors array. + */ +static unsigned int nauditors; + +/** + * JSON representation of the auditors accepted by this mint. + */ +json_t *j_auditors; + + +/** + * Check if the given @a dk issued by mint @a mh is audited by + * an auditor that is acceptable for this merchant. (And if the + * denomination is not yet expired or something silly like that.) + * + * @param mh mint issuing @a dk + * @param dk a denomination issued by @a mh + * @param mint_trusted #GNUNET_YES if the mint of @a dk is trusted by config + * @return #GNUNET_OK if we accept this denomination + */ +int +TMH_AUDITORS_check_dk (struct TALER_MINT_Handle *mh, + const struct TALER_MINT_DenomPublicKey *dk, + int mint_trusted) +{ + const struct TALER_MINT_Keys *keys; + const struct TALER_MINT_AuditorInformation *ai; + unsigned int i; + unsigned int j; + + if (0 == GNUNET_TIME_absolute_get_remaining (dk->deposit_valid_until).rel_value_us) + { + GNUNET_log (GNUNET_ERROR_TYPE_ERROR, + "Denomination key offered by client has expired for deposits\n"); + return GNUNET_SYSERR; /* expired */ + } + if (GNUNET_YES == mint_trusted) + return GNUNET_OK; + keys = TALER_MINT_get_keys (mh); + if (NULL == keys) + { + /* this should never happen, keys should have been successfully + obtained before we even got into this function */ + GNUNET_break (0); + return GNUNET_SYSERR; + } + for (i=0;i<keys->num_auditors;i++) + { + ai = &keys->auditors[i]; + for (j=0;j<ai->num_denom_keys;j++) + if (ai->denom_keys[j] == dk) + return GNUNET_OK; + } + GNUNET_log (GNUNET_ERROR_TYPE_ERROR, + "Denomination key %s offered by client not audited by accepted auditor\n", + GNUNET_h2s (&dk->h_key)); + return GNUNET_NO; +} + + +/** + * Function called on each configuration section. Finds sections + * about auditors and parses the entries. + * + * @param cls closure, with a `const struct GNUNET_CONFIGURATION_Handle *` + * @param section name of the section + */ +static void +parse_auditors (void *cls, + const char *section) +{ + const struct GNUNET_CONFIGURATION_Handle *cfg = cls; + char *pks; + struct Auditor auditor; + + if (0 != strncasecmp (section, + "auditor-", + strlen ("auditor-"))) + return; + if (GNUNET_OK != + GNUNET_CONFIGURATION_get_value_string (cfg, + section, + "NAME", + &auditor.name)) + { + GNUNET_log_config_missing (GNUNET_ERROR_TYPE_ERROR, + section, + "NAME"); + return; + } + if (GNUNET_OK != + GNUNET_CONFIGURATION_get_value_string (cfg, + section, + "URI", + &auditor.uri)) + { + GNUNET_log_config_missing (GNUNET_ERROR_TYPE_ERROR, + section, + "URI"); + GNUNET_free (auditor.name); + return; + } + if (GNUNET_OK != + GNUNET_CONFIGURATION_get_value_string (cfg, + section, + "PUBLIC_KEY", + &pks)) + { + GNUNET_log_config_missing (GNUNET_ERROR_TYPE_ERROR, + section, + "PUBLIC_KEY"); + GNUNET_free (auditor.name); + GNUNET_free (auditor.uri); + return; + } + if (GNUNET_OK != + GNUNET_CRYPTO_eddsa_public_key_from_string (pks, + strlen (pks), + &auditor.public_key.eddsa_pub)) + { + GNUNET_log_config_invalid (GNUNET_ERROR_TYPE_ERROR, + section, + "PUBLIC_KEY", + "valid public key"); + GNUNET_free (auditor.name); + GNUNET_free (auditor.uri); + GNUNET_free (pks); + return; + } + GNUNET_free (pks); + GNUNET_array_append (auditors, + nauditors, + auditor); +} + + +/** + * Parses auditor information from the configuration. + * + * @param cfg the configuration + * @return the number of auditors found; #GNUNET_SYSERR upon error in + * parsing. + */ +int +TMH_AUDITORS_init (const struct GNUNET_CONFIGURATION_Handle *cfg) +{ + unsigned int cnt; + + GNUNET_CONFIGURATION_iterate_sections (cfg, + &parse_auditors, + (void *) cfg); + + /* Generate preferred mint(s) array. */ + j_auditors = json_array (); + for (cnt = 0; cnt < nauditors; cnt++) + json_array_append_new (j_auditors, + json_pack ("{s:s, s:o, s:s}", + "name", auditors[cnt].name, + "auditor_pub", TALER_json_from_data (&auditors[cnt].public_key, + sizeof (struct TALER_AuditorPublicKeyP)), + "uri", auditors[cnt].uri)); + return nauditors; +} + + +/** + * Release auditor information state. + */ +void +TMH_AUDITORS_done () +{ + unsigned int i; + + json_decref (j_auditors); + j_auditors = NULL; + for (i=0;i<nauditors;i++) + { + GNUNET_free (auditors[i].name); + GNUNET_free (auditors[i].uri); + } + GNUNET_free (auditors); + auditors = NULL; + nauditors = 0; +} + +/* end of taler-merchant-httpd_auditors.c */ |