swrup/mte
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

don't expose priv key

Browse source
This commit is contained in:
swrup 2025-12-16 15:30:55 +01:00
parent bf45cdc6b1
commit 5b7c243f8c
6 changed files with 78 additions and 63 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/http_management.ml
View file

@ -5,7 +5,6 @@ module Keys_get = struct
let mk_future_denom ~sm
({
pub;
priv= _;
section_name;
value;
stamp_start;
@ -53,7 +52,7 @@ module Keys_get = struct
}
let mk_future_signkey ~sm
({ pub; priv= _; stamp_start; stamp_expire; stamp_end; master_sig= _ } :
({ pub; stamp_start; stamp_expire; stamp_end; master_sig= _ } :
Signkey_data.t) =
let signkey_secmod_sig =
let open Bin_sig.SigningKeyAnnouncement in
@ -69,12 +68,12 @@ module Keys_get = struct
let mk_future_keys_response ~sm =
let future_signkeys =
Secmod.get_signkeys sm
Secmod.get_signkeys_data sm
|> List.filter (fun k -> Option.is_none k.Signkey_data.master_sig)
|> List.map (fun signkey -> mk_future_signkey ~sm signkey)
in
let future_denoms =
Secmod.get_denoms sm
Secmod.get_denoms_data sm
|> List.filter (fun k -> Option.is_none k.Denom_data.master_sig)
|> List.map (fun denom -> mk_future_denom ~sm denom)
in
@ -158,7 +157,7 @@ module Keys_post = struct
(* TODO move to test *)
let check_master_signatures_update ~db_conn ~sm =
Secmod.get_denoms sm
Secmod.get_denoms_data sm
|> list_iter (fun denom ->
let error = Error "update_master_signatures sanity check failure" in
let* opt =