[GNUnet-SVN] [taler-exchange] branch master updated: also check for master public key consistency in taler-exchange-keyup

[gnunet]

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository exchange.

The following commit(s) were added to refs/heads/master by this push:
     new e0427929 also check for master public key consistency in 
taler-exchange-keyup
e0427929 is described below

commit e04279294469c0d9c8a4f4665d841495f2c83678
Author: Christian Grothoff <address@hidden>
AuthorDate: Wed Jun 26 21:19:07 2019 +0200

    also check for master public key consistency in taler-exchange-keyup
---
 src/exchange-tools/taler-exchange-keyup.c | 46 +++++++++++++++++++++++++++++--
 1 file changed, 44 insertions(+), 2 deletions(-)

diff --git a/src/exchange-tools/taler-exchange-keyup.c 
b/src/exchange-tools/taler-exchange-keyup.c
index 28e2ea1d..4c8682e5 100644
--- a/src/exchange-tools/taler-exchange-keyup.c
+++ b/src/exchange-tools/taler-exchange-keyup.c
@@ -1160,8 +1160,8 @@ revoke_denomination (const struct GNUNET_HashCode *hc)
   }
   if (GNUNET_OK !=
       TALER_EXCHANGEDB_denomination_key_revoke (basedir,
-                                               hc,
-                                               &master_priv))
+                                                hc,
+                                                &master_priv))
   {
     GNUNET_free (basedir);
     GNUNET_break (0);
@@ -1265,6 +1265,48 @@ run (void *cls,
   GNUNET_CRYPTO_eddsa_key_get_public (&master_priv.eddsa_priv,
                                       &master_public_key.eddsa_pub);
 
+  /* Check master public key in configuration matches our
+     master private key */
+  {
+    char *masters;
+    struct TALER_MasterPublicKeyP mpub_cfg;
+
+    if (GNUNET_OK !=
+        GNUNET_CONFIGURATION_get_value_string (cfg,
+                                               "exchange",
+                                               "MASTER_PUBLIC_KEY",
+                                               &masters))
+    {
+      fprintf (stderr,
+               "Master public key option missing in configuration\n");
+      global_ret = 1;
+      return;
+    }
+    if (GNUNET_OK !=
+        GNUNET_STRINGS_string_to_data (masters,
+                                       strlen (masters),
+                                       &mpub_cfg,
+                                       sizeof (mpub_cfg)))
+    {
+      fprintf (stderr,
+               "Master public key `%s' in configuration is not a valid key\n",
+               masters);
+      GNUNET_free (masters);
+      global_ret = 1;
+      return;
+    }
+    if (0 != GNUNET_memcmp (&master_public_key,
+                            &mpub_cfg))
+    {
+      fprintf (stderr,
+               "Master public key `%s' in configuration does not match our 
master private key!\n",
+               masters);
+      GNUNET_free (masters);
+      global_ret = 1;
+      return;
+    }
+    GNUNET_free (masters);
+  }
   if (NULL != auditorrequestfile)
   {
     auditor_output_file = FOPEN (auditorrequestfile,

-- 
To stop receiving notification emails like this one, please contact
address@hidden.