swrup/mte
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

wip management todo

Browse source
This commit is contained in:
Swrup 2025-10-01 19:34:42 +02:00
parent 0325cd9167
commit 14666fb836
6 changed files with 158 additions and 33 deletions
Download patch file Download diff file Expand all files Collapse all files

24
src/management.ml Normal file
View file

@ -0,0 +1,24 @@
(* TODO
https://docs.taler.net/taler-exchange-manual.html#offline-signing-setup-key-maintenance-and-tear-down
The exchange HTTP service must be running before you can complete the following offline signing procedure. Note that when an exchange is running without offline keys its not fully operational. To make the exchange HTTP service fully operational, the following steps involving the offline signing machine must be completed:
1) The public keys of various online keys used by the exchange service are exported via a management HTTP API.
2) The offline signing system validates this request and signs it.
Additionally, the offline signing system signs policy messages to configure the exchange’s bank
accounts and associated fees.
3) The messages generated by the offline signing system are uploaded via the management API
of the exchange HTTP service.
*)
(*
- generate (pub&priv) key for online signing key
- generate (pub&priv) key for denomination(s)
- implement `GET /management/keys`
- implement `POST /management/keys`
- offline tool do: GET -> sign -> POST
- now we should have a server with valid keys signed by the master offline key *)