This commit is contained in:
parent
22f8a1d26e
commit
8aba428f64
3 changed files with 62 additions and 24 deletions
|
|
@ -26,4 +26,24 @@ let test req server _ =
|
||||||
let* () = Vif.Response.with_string req str in
|
let* () = Vif.Response.with_string req str in
|
||||||
Vif.Response.respond `Internal_server_error
|
Vif.Response.respond `Internal_server_error
|
||||||
|
|
||||||
let init = test
|
let test_activate req server _ =
|
||||||
|
let pool = Vif.Server.device Devices.caqti server in
|
||||||
|
let secmod_signkey = Vif.Server.device Devices.secmod_signkey server in
|
||||||
|
let exchange_public_key = secmod_signkey.sm_key in
|
||||||
|
let fn = Pg.activate_signing_key exchange_public_key in
|
||||||
|
match Caqti_miou_unix.Pool.use fn pool with
|
||||||
|
| Ok () ->
|
||||||
|
let open Vif.Response.Syntax in
|
||||||
|
let* () =
|
||||||
|
Vif.Response.add ~field:"content-type" "text/plain; charset= utf-8"
|
||||||
|
in
|
||||||
|
let* () =
|
||||||
|
Vif.Response.with_string req (Fmt.str "activate_signing_key done~~@.")
|
||||||
|
in
|
||||||
|
Vif.Response.respond `OK
|
||||||
|
| Error err ->
|
||||||
|
(* TODO don't leak private data in error messages *)
|
||||||
|
let open Vif.Response.Syntax in
|
||||||
|
let str = Fmt.str "Database error: %a." Caqti_error.pp err in
|
||||||
|
let* () = Vif.Response.with_string req str in
|
||||||
|
Vif.Response.respond `Internal_server_error
|
||||||
|
|
|
||||||
|
|
@ -113,7 +113,7 @@ let routes =
|
||||||
get (rel / "privacy" /?? nil) --> Static.privacy;
|
get (rel / "privacy" /?? nil) --> Static.privacy;
|
||||||
get (rel / "management" / "keys" /?? nil) --> Management.keys;
|
get (rel / "management" / "keys" /?? nil) --> Management.keys;
|
||||||
get (rel / "db_test" /?? nil) --> Database.test;
|
get (rel / "db_test" /?? nil) --> Database.test;
|
||||||
get (rel / "db_init" /?? nil) --> Database.init;
|
get (rel / "db_activate" /?? nil) --> Database.test_activate;
|
||||||
]
|
]
|
||||||
|
|
||||||
let () =
|
let () =
|
||||||
|
|
|
||||||
62
src/pg.ml
62
src/pg.ml
|
|
@ -1,6 +1,8 @@
|
||||||
|
type pool = (Caqti_miou.connection, Caqti_error.t) Caqti_miou_unix.Pool.t
|
||||||
(* TODO be sure to not use postgres ptime
|
(* TODO be sure to not use postgres ptime
|
||||||
add a dune stanza like for prelude:
|
add a dune stanza like for prelude:
|
||||||
"(flags (:standard -open Prelude))" *)
|
"(flags (:standard -open Prelude))" *)
|
||||||
|
|
||||||
module Caqti_type = struct
|
module Caqti_type = struct
|
||||||
include Caqti_type
|
include Caqti_type
|
||||||
|
|
||||||
|
|
@ -13,9 +15,11 @@ module Caqti_type = struct
|
||||||
end
|
end
|
||||||
|
|
||||||
open Crypto
|
open Crypto
|
||||||
(*open Bin_type*)
|
|
||||||
|
|
||||||
let amount_t : Amount.t Caqti_type.t =
|
(*open Bin_type*)
|
||||||
|
open Caqti_request.Infix
|
||||||
|
|
||||||
|
let amount : Amount.t Caqti_type.t =
|
||||||
let open Amount in
|
let open Amount in
|
||||||
Caqti_type.custom
|
Caqti_type.custom
|
||||||
~encode:(fun amount -> Ok (amount.value, amount.fraction))
|
~encode:(fun amount -> Ok (amount.value, amount.fraction))
|
||||||
|
|
@ -23,37 +27,50 @@ let amount_t : Amount.t Caqti_type.t =
|
||||||
Amount.make ~sign:None ~currency:Config.currency ~value ~fraction)
|
Amount.make ~sign:None ~currency:Config.currency ~value ~fraction)
|
||||||
Caqti_type.(t2 int64 int32)
|
Caqti_type.(t2 int64 int32)
|
||||||
|
|
||||||
let eddsa_signature_t : EddsaSignature.t Caqti_type.t =
|
let eddsa_public : EddsaPublicKey.t Caqti_type.t =
|
||||||
|
let open EddsaPublicKey in
|
||||||
|
Caqti_type.custom
|
||||||
|
~encode:(fun v -> Ok (to_octets v))
|
||||||
|
~decode:(fun v -> Ok (of_octets v))
|
||||||
|
Caqti_type.octets
|
||||||
|
|
||||||
|
let eddsa_signature : EddsaSignature.t Caqti_type.t =
|
||||||
let open EddsaSignature in
|
let open EddsaSignature in
|
||||||
Caqti_type.custom
|
Caqti_type.custom
|
||||||
~encode:(fun master_sig -> Ok (to_octets master_sig))
|
~encode:(fun v -> Ok (to_octets v))
|
||||||
~decode:(fun s -> Ok (of_octets s))
|
~decode:(fun s -> Ok (of_octets s))
|
||||||
Caqti_type.octets
|
Caqti_type.octets
|
||||||
|
|
||||||
(* WIP: minimum db functions for basic /management *)
|
(* WIP: minimum db functions for basic /management *)
|
||||||
|
|
||||||
let pg_todo () = assert false
|
let preflight =
|
||||||
|
let l =
|
||||||
open Caqti_request.Infix
|
List.map
|
||||||
|
Caqti_type.(unit ->. unit)
|
||||||
(* signkey *)
|
[
|
||||||
(* todo:
|
"SET SESSION CHARACTERISTICS AS TRANSACTION ISOLATION LEVEL \
|
||||||
- what type to use for TALER_ExchangePublicKeyP + TALER_EXCHANGEDB_SignkeyMetaData
|
SERIALIZABLE;"; "SET enable_sort=OFF;"; "SET enable_seqscan=OFF;";
|
||||||
-> I think it could be something = to FutureSignKey.t
|
"SET enable_mergejoin=OFF;"; "SET search_path TO exchange;";
|
||||||
- master signature: over smthing? *)
|
]
|
||||||
let activate_signing_key _cls (exchange_public_key : Signkey.t) =
|
|
||||||
(*let open Bin_type in*)
|
|
||||||
let _exchange_pub = EddsaPublicKey.(to_octets exchange_public_key.pub) in
|
|
||||||
let _master_sig =
|
|
||||||
exchange_public_key.master_sig |> Option.get
|
|
||||||
(*|> EddsaSignature.to_octets*)
|
|
||||||
in
|
in
|
||||||
let _insert_signkey =
|
fun (module Conn : Caqti_miou.CONNECTION) ->
|
||||||
Caqti_type.(t5 string ptime ptime ptime string ->! int)
|
Syntax.list_iter (fun p -> Conn.exec p ()) l
|
||||||
|
|
||||||
|
let activate_signing_key =
|
||||||
|
let insert_signkey =
|
||||||
|
Caqti_type.(t5 eddsa_public ptime ptime ptime eddsa_signature ->. unit)
|
||||||
"INSERT INTO exchange_sign_keys (exchange_pub, valid_from, expire_sign, \
|
"INSERT INTO exchange_sign_keys (exchange_pub, valid_from, expire_sign, \
|
||||||
expire_legal, master_sig) VALUES ($1, $2, $3, $4, $5);"
|
expire_legal, master_sig) VALUES ($1, $2, $3, $4, $5);"
|
||||||
in
|
in
|
||||||
pg_todo ()
|
fun (exchange_public_key : Signkey.t) (module Conn : Caqti_miou.CONNECTION) ->
|
||||||
|
let exchange_pub = exchange_public_key.pub in
|
||||||
|
let valid_from = exchange_public_key.stamp_start in
|
||||||
|
let expire_sign = exchange_public_key.stamp_expire in
|
||||||
|
let expire_legal = exchange_public_key.stamp_end in
|
||||||
|
(*let master_sig = exchange_public_key.master_sig |> Option.get in*)
|
||||||
|
let master_sig = EddsaSignature.of_octets (String.make 64 'x') in
|
||||||
|
Conn.exec insert_signkey
|
||||||
|
(exchange_pub, valid_from, expire_sign, expire_legal, master_sig)
|
||||||
|
|
||||||
(*
|
(*
|
||||||
|
|
||||||
|
|
@ -78,6 +95,7 @@ TEH_PG_activate_signing_key (
|
||||||
|
|
||||||
(* ----- *)
|
(* ----- *)
|
||||||
|
|
||||||
|
let pg_todo () = assert false
|
||||||
let lookup_signing_key = pg_todo
|
let lookup_signing_key = pg_todo
|
||||||
let iterate_active_signkeys = pg_todo
|
let iterate_active_signkeys = pg_todo
|
||||||
let insert_signkey_revocation = pg_todo
|
let insert_signkey_revocation = pg_todo
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue