[taler-exchange] branch master updated: new GANA code for revoked esign key

[gnunet]

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository exchange.

The following commit(s) were added to refs/heads/master by this push:
     new efbc411d new GANA code for revoked esign key
efbc411d is described below

commit efbc411dea0d838d0067fc73dfd36a9741cfacc2
Author: Christian Grothoff <christian@grothoff.org>
AuthorDate: Sat Dec 26 16:23:22 2020 +0100

    new GANA code for revoked esign key
---
 contrib/gana                                           |  2 +-
 src/auditor/taler-auditor-httpd_deposit-confirmation.c | 11 +++++++++++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/contrib/gana b/contrib/gana
index 912dc84d..e2f247cf 160000
--- a/contrib/gana
+++ b/contrib/gana
@@ -1 +1 @@
-Subproject commit 912dc84dc52a1291b635e19da32c7c824719f8d4
+Subproject commit e2f247cf9364ea0d441ae4c7b2f0aaa427e03dae
diff --git a/src/auditor/taler-auditor-httpd_deposit-confirmation.c 
b/src/auditor/taler-auditor-httpd_deposit-confirmation.c
index 61263888..726e4de6 100644
--- a/src/auditor/taler-auditor-httpd_deposit-confirmation.c
+++ b/src/auditor/taler-auditor-httpd_deposit-confirmation.c
@@ -175,6 +175,17 @@ verify_and_execute_deposit_confirmation (
                                             
GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY);
   GNUNET_assert (0 == pthread_mutex_unlock (&lock));
 
+  if (0 == strcmp (cached,
+                   "revoked"))
+  {
+    TALER_LOG_WARNING (
+      "Invalid signature on /deposit-confirmation request: key was revoked\n");
+    return TALER_MHD_reply_with_error (connection,
+                                       MHD_HTTP_GONE,
+                                       
TALER_EC_AUDITOR_EXCHANGE_SIGNING_KEY_REVOKED,
+                                       "exchange signing key was revoked");
+  }
+
   /* check deposit confirmation signature */
   {
     struct TALER_DepositConfirmationPS dcs = {

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.