test/validate_response.ml

@@ -51,7 +51,19 @@ let keys content =
              })
   in
 
-  (* validate exchange_pub *)
+  let* () =
+    let opt =
+      List.find_opt (fun sk -> sk.SignKey.key = v.exchange_pub) v.signkeys
+    in
+    match opt with
+    | None -> Fmt.error "exchange_pub is not in signkeys list"
+    | Some sk ->
+        let sk = SignKey.to_signkey sk in
+        (* todo will need to fake time to validate expired data *)
+        let now = Timestamp.of_ptime (Ptime_clock.now ()) in
+        if Signkey.is_valid_at ~timestamp:now sk then Ok ()
+        else Fmt.error "exchange_pub is not valid at the current time"
+  in
   (* validate exchange_sig *)
 
   (* validate denominations *)