swrup/mte
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

warn instead of fail

Browse source
This commit is contained in:
swrup 2026-02-24 16:59:18 +01:00
parent 74d909fa90
commit fa5d0ae75d
1 changed files with 24 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

58
src/keys.ml
View file

@ -55,46 +55,36 @@ module Make (Conn : Pg.CONN) : S = struct
let signkeys () : Signkey.t list result =
let now = Timestamp.of_ptime @@ Ptime_clock.now () in
let* l = Pg.get_signkeys conn ~now |> unwrap_err_caqti in
let* () =
list_iter
(fun sk ->
match Sm_eddsa.find_key sk.Signkey.pub with
| None ->
Fmt.error
"signkeys found in database are missing from secmod, (unclean \
database/secmod state?)"
| Some _ -> Ok ())
let+ l = Pg.get_signkeys conn ~now |> unwrap_err_caqti in
let missing_l, l =
List.partition
(fun sk -> Option.is_none @@ Sm_eddsa.find_key sk.Signkey.pub)
l
in
Ok l
match missing_l with
| [] -> l
| _ ->
Logs.warn (fun m ->
m
"signkeys found in database are missing from secmod, (unclean \
database/secmod state?)");
l
let denominations () =
let* l = Pg.get_denominations conn () |> unwrap_err_caqti in
let* () =
list_iter
(fun dn ->
match Sm_rsa.find_key dn.Denomination.pub with
| None ->
Fmt.error
"denominations found in database are missing from secmod, \
(unclean database/secmod state?)"
| Some _ -> Ok ())
let+ l = Pg.get_denominations conn () |> unwrap_err_caqti in
let missing_l, l =
List.partition
(fun dn -> Option.is_none @@ Sm_rsa.find_key dn.Denomination.pub)
l
in
Ok l
(* TODO db-sm
don't fail and just warn?
have something to run tests with clean db+sm *)
(* test if database/secmod state looks ok *)
let () =
let res =
let* _sk_l = signkeys () in
let* _dn_l = denominations () in
Ok ()
in
match res with Error e -> Fmt.failwith "%s" e | Ok () -> ()
match missing_l with
| [] -> l
| _ ->
Logs.warn (fun m ->
m
"denominations found in database are missing from secmod, \
(unclean database/secmod state?)");
l
let make_future_sk ~pub ~start ~expire =
let stamp_start = Timestamp.of_absolute start in