-
Notifications
You must be signed in to change notification settings - Fork 9
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* add refactor from past * refactor resign & reshare * fix critics
- Loading branch information
1 parent
454b91c
commit 5950782
Showing
16 changed files
with
646 additions
and
585 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,24 @@ | ||
| package operator | ||
|
|
||
| import ( | ||
| "crypto/rand" | ||
| "crypto/rsa" | ||
|
|
||
| "github.com/bloxapp/ssv/utils/rsaencryption" | ||
| spec_crypto "github.com/ssvlabs/dkg-spec/crypto" | ||
| ) | ||
|
|
||
| // Sign creates a RSA signature for the message at operator before sending it to initiator | ||
| func (s *Switch) Sign(msg []byte) ([]byte, error) { | ||
| return spec_crypto.SignRSA(s.PrivateKey, msg) | ||
| } | ||
|
|
||
| // Encrypt with RSA public key private DKG share key | ||
| func (s *Switch) Encrypt(msg []byte) ([]byte, error) { | ||
| return rsa.EncryptPKCS1v15(rand.Reader, &s.PrivateKey.PublicKey, msg) | ||
| } | ||
|
|
||
| // Decrypt with RSA private key private DKG share key | ||
| func (s *Switch) Decrypt(ciphertext []byte) ([]byte, error) { | ||
| return rsaencryption.DecodeKey(s.PrivateKey, ciphertext) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,154 @@ | ||
| package operator | ||
|
|
||
| import ( | ||
| "encoding/hex" | ||
| "fmt" | ||
| "io" | ||
| "net/http" | ||
|
|
||
| "github.com/bloxapp/ssv-dkg/pkgs/utils" | ||
| "github.com/bloxapp/ssv-dkg/pkgs/wire" | ||
| "github.com/pkg/errors" | ||
| "go.uber.org/zap" | ||
| ) | ||
|
|
||
| func (s *Server) resultsHandler(writer http.ResponseWriter, request *http.Request) { | ||
| rawdata, err := io.ReadAll(request.Body) | ||
| if err != nil { | ||
| utils.WriteErrorResponse(s.Logger, writer, err, http.StatusBadRequest) | ||
| return | ||
| } | ||
| signedResultMsg := &wire.SignedTransport{} | ||
| if err := signedResultMsg.UnmarshalSSZ(rawdata); err != nil { | ||
| utils.WriteErrorResponse(s.Logger, writer, err, http.StatusBadRequest) | ||
| return | ||
| } | ||
|
|
||
| // Validate that incoming message is a result message | ||
| if signedResultMsg.Message.Type != wire.ResultMessageType { | ||
| utils.WriteErrorResponse(s.Logger, writer, errors.New("received wrong message type"), http.StatusBadRequest) | ||
| return | ||
| } | ||
| s.Logger.Debug("received a result message") | ||
| err = s.State.SaveResultData(signedResultMsg, s.OutputPath) | ||
| if err != nil { | ||
| err := &utils.SensitiveError{Err: err, PresentedErr: "failed to write results"} | ||
| utils.WriteErrorResponse(s.Logger, writer, err, http.StatusBadRequest) | ||
| return | ||
| } | ||
| writer.WriteHeader(http.StatusOK) | ||
| } | ||
|
|
||
| func (s *Server) healthHandler(writer http.ResponseWriter, request *http.Request) { | ||
| b, err := s.State.Pong() | ||
| if err != nil { | ||
| utils.WriteErrorResponse(s.Logger, writer, err, http.StatusBadRequest) | ||
| return | ||
| } | ||
| writer.WriteHeader(http.StatusOK) | ||
| if _, err := writer.Write(b); err != nil { | ||
| s.Logger.Error("error writing health_check response: " + err.Error()) | ||
| return | ||
| } | ||
| } | ||
|
|
||
| func (s *Server) dkgHandler(writer http.ResponseWriter, request *http.Request) { | ||
| s.Logger.Debug("received a dkg protocol message") | ||
| rawdata, err := io.ReadAll(request.Body) | ||
| if err != nil { | ||
| utils.WriteErrorResponse(s.Logger, writer, fmt.Errorf("operator %d, err: %v", s.State.OperatorID, err), http.StatusBadRequest) | ||
| return | ||
| } | ||
| b, err := s.State.ProcessMessage(rawdata) | ||
| if err != nil { | ||
| utils.WriteErrorResponse(s.Logger, writer, fmt.Errorf("operator %d, err: %v", s.State.OperatorID, err), http.StatusBadRequest) | ||
| return | ||
| } | ||
| writer.WriteHeader(http.StatusOK) | ||
| if _, err := writer.Write(b); err != nil { | ||
| s.Logger.Error("error writing dkg response: " + err.Error()) | ||
| return | ||
| } | ||
| } | ||
|
|
||
| func (s *Server) initHandler(writer http.ResponseWriter, request *http.Request) { | ||
| s.Logger.Debug("incoming INIT msg") | ||
| signedInitMsg, err := processIncomingRequest(s.Logger, writer, request, wire.InitMessageType, s.State.OperatorID) | ||
| if err != nil { | ||
| s.Logger.Error("Error processing incoming init message", zap.Error(err)) | ||
| utils.WriteErrorResponse(s.Logger, writer, err, http.StatusBadRequest) | ||
| return | ||
| } | ||
| reqid := signedInitMsg.Message.Identifier | ||
| logger := s.Logger.With(zap.String("reqid", hex.EncodeToString(reqid[:]))) | ||
| logger.Debug("creating instance with init message data") | ||
| b, err := s.State.InitInstance(reqid, signedInitMsg.Message, signedInitMsg.Signer, signedInitMsg.Signature) | ||
| if err != nil { | ||
| s.Logger.Error("Error creating instance", zap.Error(err)) | ||
| utils.WriteErrorResponse(s.Logger, writer, fmt.Errorf("operator %d, failed to initialize instance, err: %v", s.State.OperatorID, err), http.StatusBadRequest) | ||
| return | ||
| } | ||
| logger.Info("✅ Instance started successfully") | ||
|
|
||
| writer.WriteHeader(http.StatusOK) | ||
| if _, err := writer.Write(b); err != nil { | ||
| logger.Error("error writing init response: " + err.Error()) | ||
| return | ||
| } | ||
| } | ||
|
|
||
| func (s *Server) resignHandler(writer http.ResponseWriter, request *http.Request) { | ||
| s.Logger.Debug("incoming RESIGN msg") | ||
| signedResignMsg, err := processIncomingRequest(s.Logger, writer, request, wire.ResignMessageType, s.State.OperatorID) | ||
| if err != nil { | ||
| s.Logger.Error("Error processing incoming init message", zap.Error(err)) | ||
| utils.WriteErrorResponse(s.Logger, writer, err, http.StatusBadRequest) | ||
| return | ||
| } | ||
| reqid := signedResignMsg.Message.Identifier | ||
| logger := s.Logger.With(zap.String("reqid", hex.EncodeToString(reqid[:]))) | ||
| b, err := s.State.HandleInstanceOperation(reqid, signedResignMsg.Message, signedResignMsg.Signer, signedResignMsg.Signature, "resign") | ||
| if err != nil { | ||
| s.Logger.Error("Error resigning instance", zap.Error(err)) | ||
| utils.WriteErrorResponse(s.Logger, writer, fmt.Errorf("operator %d, failed to resign, err: %v", s.State.OperatorID, err), http.StatusBadRequest) | ||
| return | ||
| } | ||
| logger.Info("✅ resigned data successfully") | ||
| writer.WriteHeader(http.StatusOK) | ||
| if _, err := writer.Write(b); err != nil { | ||
| logger.Error("error writing resign response: " + err.Error()) | ||
| return | ||
| } | ||
| } | ||
|
|
||
| func (s *Server) reshareHandler(writer http.ResponseWriter, request *http.Request) { | ||
| s.Logger.Debug("incoming RESHARE msg") | ||
| rawdata, err := io.ReadAll(request.Body) | ||
| if err != nil { | ||
| utils.WriteErrorResponse(s.Logger, writer, fmt.Errorf("operator %d, err: %v", s.State.OperatorID, err), http.StatusBadRequest) | ||
| return | ||
| } | ||
| signedReshareMsg := &wire.SignedTransport{} | ||
| if err := signedReshareMsg.UnmarshalSSZ(rawdata); err != nil { | ||
| utils.WriteErrorResponse(s.Logger, writer, err, http.StatusBadRequest) | ||
| return | ||
| } | ||
| // Validate that incoming message is an init message | ||
| if signedReshareMsg.Message.Type != wire.ReshareMessageType { | ||
| utils.WriteErrorResponse(s.Logger, writer, fmt.Errorf("operator %d, err: %v", s.State.OperatorID, errors.New("not reshare message to reshare route")), http.StatusBadRequest) | ||
| return | ||
| } | ||
| reqid := signedReshareMsg.Message.Identifier | ||
| logger := s.Logger.With(zap.String("reqid", hex.EncodeToString(reqid[:]))) | ||
| b, err := s.State.HandleInstanceOperation(reqid, signedReshareMsg.Message, signedReshareMsg.Signer, signedReshareMsg.Signature, "reshare") | ||
| if err != nil { | ||
| utils.WriteErrorResponse(s.Logger, writer, fmt.Errorf("operator %d, err: %v", s.State.OperatorID, err), http.StatusBadRequest) | ||
| return | ||
| } | ||
| logger.Info("✅ Reshare instance created successfully") | ||
| writer.WriteHeader(http.StatusOK) | ||
| if _, err := writer.Write(b); err != nil { | ||
| logger.Error("error writing reshare response: " + err.Error()) | ||
| return | ||
| } | ||
| } |
Oops, something went wrong.