exchange

commit efbc411dea0d838d0067fc73dfd36a9741cfacc2
parent 57c90547840ea2a073c950116303c54f9ef976f1
Author: Christian Grothoff <christian@grothoff.org>
Date:   Sat, 26 Dec 2020 16:23:22 +0100

new GANA code for revoked esign key

Diffstat:
M
src/auditor/taler-auditor-httpd_deposit-confirmation.c
 | 
11
+++++++++++

1 file changed, 11 insertions(+), 0 deletions(-)
diff --git a/src/auditor/taler-auditor-httpd_deposit-confirmation.c b/src/auditor/taler-auditor-httpd_deposit-confirmation.c
@@ -175,6 +175,17 @@ verify_and_execute_deposit_confirmation (
                                             GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY);
   GNUNET_assert (0 == pthread_mutex_unlock (&lock));
 
+  if (0 == strcmp (cached,
+                   "revoked"))
+  {
+    TALER_LOG_WARNING (
+      "Invalid signature on /deposit-confirmation request: key was revoked\n");
+    return TALER_MHD_reply_with_error (connection,
+                                       MHD_HTTP_GONE,
+                                       TALER_EC_AUDITOR_EXCHANGE_SIGNING_KEY_REVOKED,
+                                       "exchange signing key was revoked");
+  }
+
   /* check deposit confirmation signature */
   {
     struct TALER_DepositConfirmationPS dcs = {