+ wip /management/keys/

This commit is contained in:
swrup 2025-11-30 14:23:55 +01:00
parent cf4da6b382
commit 83dfd701c0
5 changed files with 30 additions and 53 deletions

View file

@ -109,10 +109,3 @@ let keys_get req server _env =
let* () = with_string req s in let* () = with_string req s in
let* () = add ~field:"content-type" "application/json" in let* () = add ~field:"content-type" "application/json" in
respond `OK respond `OK
let keys_post req _server _env =
let open Vif.Response in
let open Syntax in
let* () = with_string req {||} in
let* () = add ~field:"content-type" "application/json" in
respond `OK

View file

@ -23,17 +23,12 @@ let hello req _server _env =
let routes = let routes =
let open Vif.Uri in let open Vif.Uri in
let open Vif.Route in let open Vif.Route in
let open Vif.Type in (*let open Vif.Type in*)
(* just for alignement *)
let get_ = get in
let post = Fun.flip post in
[ [
get_ (rel /?? nil) --> hello; get (rel /?? nil) --> hello;
get_ (rel / "terms" /?? nil) --> Static.terms; get (rel / "terms" /?? nil) --> Static.terms;
get_ (rel / "privacy" /?? nil) --> Static.privacy; get (rel / "privacy" /?? nil) --> Static.privacy;
get_ (rel / "test" /?? nil) --> Database.test_activate; get (rel / "management" / "keys" /?? nil) --> Management.keys_get;
get_ (rel / "management" / "keys" /?? nil) --> Management.keys_get;
post (rel / "management" / "keys" /?? nil) any --> Management.keys_post;
] ]
let () = let () =

View file

@ -1,5 +1,5 @@
(executable (executable
(public_name offline) (public_name offline)
(name offline) (name offline)
(modules offline offline_signature) (modules offline offline_bin)
(libraries cmdliner bos fmt mirage-crypto ptime mte vif)) (libraries cmdliner bos fmt mirage-crypto ptime mte vif))

View file

@ -1,36 +1,30 @@
(* TODO (* TODO
- clean up cmdliner - clean up cmdliner
- don't depends on wget
- setup: need public key in config file - setup: need public key in config file
- check sigs *) - check sigs *)
(* doc: https://docs.taler.net/manpages/taler-exchange-offline.1.html *) (* doc: https://docs.taler.net/manpages/taler-exchange-offline.1.html *)
let version = "%%VERSION%%" let version = "%%VERSION%%"
let base_url = Uri.of_string "http://localhost:3434/"
let download ~base_url ~output = let download ~output =
let open Bos in let open Bos in
let uri = let uri = Uri.with_path base_url "/management/keys/" |> Uri.to_string in
Uri.with_path (Uri.of_string base_url) "/management/keys/" |> Uri.to_string OS.Cmd.run Cmd.(v "curl" (* % "-s" *) % "-o" % output % "-X" % "GET" % uri)
in
let wget = Cmd.(v "wget" % "-O" % output % uri) in
OS.Cmd.run wget
let upload ~base_url ~input = let upload ~input =
let open Bos in let open Bos in
let uri = let uri = Uri.with_path base_url "/management/keys/" |> Uri.to_string in
Uri.with_path (Uri.of_string base_url) "/management/keys/" |> Uri.to_string OS.Cmd.run
in
let wget =
Cmd.( Cmd.(
v "wget" v "curl"
% "--method=POST" % "-i"
% "--header='Content-Type: application/json'" % "-X"
% "--body-file" % "POST"
% input % "-H"
% "-O" % "Content-Type: application/json"
% "/dev/null" % "--data"
% ("@" ^ input)
% uri) % uri)
in
OS.Cmd.run wget
let setup ~output = let setup ~output =
let output = Fpath.v output in let output = Fpath.v output in
@ -52,8 +46,9 @@ let sign ~input ~output ~master_key =
let* master_key = File.read master_key |> unwrap_err_msg in let* master_key = File.read master_key |> unwrap_err_msg in
let master_key = EddsaPrivateKey.of_octets master_key in let master_key = EddsaPrivateKey.of_octets master_key in
let* future_key_response = Api.decode Api.FutureKeysResponse.jsont input in let* future_key_response = Api.decode Api.FutureKeysResponse.jsont input in
let* () = Offline_bin.verify_future_key_response future_key_response in
let master_signatures = let master_signatures =
Offline_signature.master_signatures ~master_key future_key_response Offline_bin.make_master_signatures ~master_key future_key_response
in in
let* s = Api.encode Api.MasterSignatures.jsont master_signatures in let* s = Api.encode Api.MasterSignatures.jsont master_signatures in
let* () = File.write output s |> unwrap_err_msg in let* () = File.write output s |> unwrap_err_msg in
@ -91,14 +86,10 @@ let download_cmd =
let doc = "File to save data to be signed." in let doc = "File to save data to be signed." in
Arg.(value & opt filepath "future_keys.json" & info [ "o"; "output" ] ~doc) Arg.(value & opt filepath "future_keys.json" & info [ "o"; "output" ] ~doc)
in in
let base_url =
let doc = "Base url of the exchange." in
Arg.(value & opt string "http://localhost:3434/" & info [ "base-url" ] ~doc)
in
Cmd.make (Cmd.info "download" ~version ~doc ~man) Cmd.make (Cmd.info "download" ~version ~doc ~man)
@@ @@
let+ output = output and+ base_url = base_url in let+ output = output in
match download ~base_url ~output with match download ~output with
| Error (`Msg err) -> | Error (`Msg err) ->
Fmt.epr "Download failure: %s@." err; Fmt.epr "Download failure: %s@." err;
exit 1 exit 1
@ -114,14 +105,10 @@ let upload_cmd =
Arg.( Arg.(
value & opt filepath "master_signatures.json" & info [ "i"; "input" ] ~doc) value & opt filepath "master_signatures.json" & info [ "i"; "input" ] ~doc)
in in
let base_url =
let doc = "Base url of the exchange." in
Arg.(value & opt string "http://localhost:3434/" & info [ "base-url" ] ~doc)
in
Cmd.make (Cmd.info "upload" ~version ~doc ~man) Cmd.make (Cmd.info "upload" ~version ~doc ~man)
@@ @@
let+ input = input and+ base_url = base_url in let+ input = input in
match upload ~base_url ~input with match upload ~input with
| Error (`Msg err) -> | Error (`Msg err) ->
Fmt.epr "Upload failure: %s@." err; Fmt.epr "Upload failure: %s@." err;
exit 1 exit 1

View file

@ -70,7 +70,7 @@ let signkey_signature ~master_key
in in
Api.SignKeySignature.{ key; master_sig } Api.SignKeySignature.{ key; master_sig }
let master_signatures ~master_key let make_master_signatures ~master_key
Api.FutureKeysResponse. Api.FutureKeysResponse.
{ {
future_denoms; future_denoms;
@ -83,3 +83,5 @@ let master_signatures ~master_key
let denom_sigs = List.map (denom_signature ~master_key) future_denoms in let denom_sigs = List.map (denom_signature ~master_key) future_denoms in
let signkey_sigs = List.map (signkey_signature ~master_key) future_signkeys in let signkey_sigs = List.map (signkey_signature ~master_key) future_signkeys in
Api.MasterSignatures.{ denom_sigs; signkey_sigs } Api.MasterSignatures.{ denom_sigs; signkey_sigs }
let verify_future_key_response _future_key_response = assert false