aboutsummaryrefslogtreecommitdiff
path: root/src/auditor
diff options
context:
space:
mode:
authorChristian Grothoff <christian@grothoff.org>2020-12-26 16:23:22 +0100
committerChristian Grothoff <christian@grothoff.org>2020-12-26 16:23:22 +0100
commitefbc411dea0d838d0067fc73dfd36a9741cfacc2 (patch)
treef4a740404ec8810ce6431f5de079b66f1b94bc1f /src/auditor
parent57c90547840ea2a073c950116303c54f9ef976f1 (diff)
new GANA code for revoked esign key
Diffstat (limited to 'src/auditor')
-rw-r--r--src/auditor/taler-auditor-httpd_deposit-confirmation.c11
1 files changed, 11 insertions, 0 deletions
diff --git a/src/auditor/taler-auditor-httpd_deposit-confirmation.c b/src/auditor/taler-auditor-httpd_deposit-confirmation.c
index 61263888f..726e4de6d 100644
--- a/src/auditor/taler-auditor-httpd_deposit-confirmation.c
+++ b/src/auditor/taler-auditor-httpd_deposit-confirmation.c
@@ -175,6 +175,17 @@ verify_and_execute_deposit_confirmation (
GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY);
GNUNET_assert (0 == pthread_mutex_unlock (&lock));
+ if (0 == strcmp (cached,
+ "revoked"))
+ {
+ TALER_LOG_WARNING (
+ "Invalid signature on /deposit-confirmation request: key was revoked\n");
+ return TALER_MHD_reply_with_error (connection,
+ MHD_HTTP_GONE,
+ TALER_EC_AUDITOR_EXCHANGE_SIGNING_KEY_REVOKED,
+ "exchange signing key was revoked");
+ }
+
/* check deposit confirmation signature */
{
struct TALER_DepositConfirmationPS dcs = {