commit fe732cd38e1f2c0bc2ee8c2377cbfd95aff5167b
parent c6d233e6ed52ff054f02ccb57762bb577d5e76f8
Author: Christian Grothoff <christian@grothoff.org>
Date: Thu, 24 Dec 2020 14:48:21 +0100
document offline options
Diffstat:
2 files changed, 30 insertions(+), 0 deletions(-)
diff --git a/manpages/taler.conf.5.rst b/manpages/taler.conf.5.rst
@@ -157,6 +157,28 @@ EXCHANGE OFFLINE SIGNING OPTIONS
The following options must be in the section "[exchange-offline]".
+MASTER_PRIV_FILE
+ Where to store the offline private key of the exchange.
+ Mandatory.
+
+SECM_TOFU_FILE
+ Where to store the public keys of both crypto helper modules.
+ Used to persist the keys after the first invocation of the tool,
+ so that if they ever change in the future, this is detected and
+ the tool can abort.
+ Mandatory.
+
+SECM_DENOM_PUBKEY
+ Public key of the (RSA) crypto helper module. Optional. If not given,
+ we will rely on TOFU. Note that once TOFU has been established,
+ this option will also be ignored.
+
+SECM_ESIGN_PUBKEY
+ Public key of the (EdDSA) crypto helper module. Optional. If not given,
+ we will rely on TOFU. Note that once TOFU has been established,
+ this option will also be ignored.
+
+
EXCHANGE RSA CRYPTO HELPER OPTIONS
------------------------------
diff --git a/taler-auditor-manual.rst b/taler-auditor-manual.rst
@@ -699,6 +699,14 @@ Invariants checked by the taler-helper-auditor-coins
This is from CodeBlau's analysis. A proper write-up is pending.
CodeBlau reports the following checks:
+- check that all denominations used by the exchange have been signed using
+ this auditor's key. All denominations encountered in the database that
+ this auditor did not officially sign for are reported (but still included
+ in the audit as they obviously may impact the exchange's bank balance).
+ Depending on the business situation, this may be normal (say if an exchange
+ is changing auditors and newer denominations are no longer supported until
+ their end-of-life by the current auditor).
+
- emergency on denomination over loss
- value of coins deposited exceed value of coins issued
