This commit is contained in:
swrup 2025-12-06 23:25:29 +01:00
parent 846122b49c
commit ae27ce87a8
3 changed files with 37 additions and 31 deletions

View file

@ -1,19 +1,20 @@
(* TODO
- key rotation
- how many signkey to use?
we just use 1 for now *)
- key rotation
- how many signkey to use?
we just use 1 for now *)
open Syntax
type t = {
lock: Miou.Mutex.t;
sm_key: Signkey.t;
keys: Signkey.t list;
signkeys: Signkey.t list;
}
let dir = Fpath.(v "data" / "secmod_signkey")
let store_secmod_data t =
let* () = Data_file.write_eddsa Fpath.(dir / "sm_key") t.sm_key.priv in
t.keys
t.signkeys
|> List.mapi (fun i key ->
let fname = Fpath.(dir / string_of_int i) in
(fname, key.Signkey.priv))
@ -24,7 +25,7 @@ let load conn =
Fmt.error_msg "secmod_signkey load error: invalid store state."
in
let* sm_key = Data_file.load_signkey conn Fpath.(dir / "sm_key") in
let* keys =
let* signkeys =
let l = List.init 1 (fun i -> Fpath.(dir / string_of_int i)) in
let* l =
Syntax.list_map (fun fname -> Data_file.load_signkey conn fname) l
@ -33,12 +34,15 @@ let load conn =
| Error () -> error_invalid_state
| Ok opt -> Ok opt
in
match (sm_key, keys) with
match (sm_key, signkeys) with
| None, None -> Ok None
| Some sm_key, Some keys -> Ok (Some { sm_key; keys })
| Some sm_key, Some signkeys ->
let lock = Miou.Mutex.create () in
Ok (Some { lock; sm_key; signkeys })
| _, _ -> error_invalid_state
let make_new () =
let lock = Miou.Mutex.create () in
let sm_key = Signkey.make () in
let keys = [ Signkey.make () ] in
{ sm_key; keys }
let signkeys = [ Signkey.make () ] in
{ lock; sm_key; signkeys }