exchange

commit a19baaccf3c93390a0c40395454c667440f6b2bd
parent 32cdef2b622f472c5d0b522f0551087fbca6dc4c
Author: Marcello Stanisci <stanisci.m@gmail.com>
Date:   Fri,  5 Apr 2019 16:29:48 +0200

Do not include legally expired keys into /keys response.

Diffstat:
M
src/exchange/taler-exchange-httpd_keystate.c
 | 
7
+++++++

1 file changed, 7 insertions(+), 0 deletions(-)
diff --git a/src/exchange/taler-exchange-httpd_keystate.c b/src/exchange/taler-exchange-httpd_keystate.c
@@ -1494,6 +1494,13 @@ reload_public_denoms_cb (void *cls,
   struct ResponseFactoryContext *rfc = cls;
   struct TALER_EXCHANGEDB_DenominationKeyIssueInformation dki;
 
+  if (rfc->now.abs_value_us > GNUNET_TIME_absolute_ntoh
+    (issue->properties.expire_legal).abs_value_us)
+  {
+    /* Expired key, discard.  */
+    return;
+  }
+
   if (NULL !=
       GNUNET_CONTAINER_multihashmap_get (rfc->key_state->denomkey_map,
                                          &issue->properties.denom_hash))