#95 Not handling msgs signed by host keys

[Wesley Tanaka]

Stack traces and such to follow

[Wesley Tanaka]

Logged In: YES
user_id=11717

Requesting key "*@ofb.net"
java.lang.Exception: From here
at
wtanaka.praya.gale.GaleClient.fetchKeyFor(GaleClient.java:883)
at
wtanaka.praya.gale.GaleClient.sendToLocations(GaleClient.java:1172)
at
wtanaka.praya.gale.LocationRecipient.sendReply(LocationRecipient.java:120)
at
wtanaka.praya.gui.DefaultCompositor$2.actionPerformed(DefaultCompositor.java:128)
at
javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:1450)
at
javax.swing.AbstractButton$ForwardActionEvents.actionPerformed(AbstractButton.java:1504)
at
javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:378)
at
javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:250)
at
javax.swing.plaf.basic.BasicButtonListener.mouseReleased(BasicButtonListener.java:216)
at
java.awt.Component.processMouseEvent(Component.java:3715)
at java.awt.Component.processEvent(Component.java:3544)
at java.awt.Container.processEvent(Container.java:1164)
at
java.awt.Component.dispatchEventImpl(Component.java:2593)
at
java.awt.Container.dispatchEventImpl(Container.java:1213)
at java.awt.Component.dispatchEvent(Component.java:2497)
at
java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:2451)
at
java.awt.LightweightDispatcher.processMouseEvent(Container.java:2216)
at
java.awt.LightweightDispatcher.dispatchEvent(Container.java:2125)
at
java.awt.Container.dispatchEventImpl(Container.java:1200)
at java.awt.Window.dispatchEventImpl(Window.java:914)
at java.awt.Component.dispatchEvent(Component.java:2497)
at
java.awt.EventQueue.dispatchEvent(EventQueue.java:339)
at
java.awt.EventDispatchThread.pumpOneEventForHierarchy(EventDispatchThread.java:131)
at
java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:98)
at
java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
at
java.awt.EventDispatchThread.run(EventDispatchThread.java:85)
Multiplexer is resubscribing
[Location: test@ofb.net] resolved to Public Key:
<test@ofb.net> (768 bits) Unsigned, No Expire Date
security/signature
rsa.exponent: [128 bytes]
rsa.modulus: [128 bytes]
rsa.bits: 768
key.owner:
key.member:
key.signed: Sat Nov 11 18:28:24 PST 2000
key.expires: Wed Dec 31 15:59:59 PST 1969

Encrypting to 0 keys
Requesting key "ofb.net@mili.eu.org"
java.lang.Exception: From here
at
wtanaka.praya.gale.GaleClient.fetchKeyFor(GaleClient.java:883)
at
wtanaka.praya.gale.GaleReadThread.run(GaleReadThread.java:79)
Multiplexer is resubscribing
Requesting key "ofb.net@mili.eu.org"
java.lang.Exception: From here
at
wtanaka.praya.gale.GaleClient.fetchKeyFor(GaleClient.java:883)
at
wtanaka.praya.gale.GaleReadThread.run(GaleReadThread.java:79)
Multiplexer is resubscribing

[Wesley Tanaka]

Logged In: YES
user_id=11717

The suspect code is here:

if (signature != null)
{
if (signature instanceof SignatureFragment)
{
String id
= ((SignatureFragment)
signature).getClaimedID();
m_client.fetchKeyFor (new Location(id,
m_client.getDefaultDomain()));
KeyCache.getInstance()
.waitForPublic
(m_client.MAX_TIMEOUT, id);
}
}

If id does not contain a "@", this code should request a
host key instead of a normal location key. I'm not sure
what the message is to do that.

[Wesley Tanaka]

Logged In: YES
user_id=11717

[test@ofb.net] from Wesley Tanaka
What be the proper message for requesting a host public key,
I wonder...
[test@ofb.net] from Jacob Mandelson (jlm@ugcs.caltech.edu)
By 'host' you mean something like mili.eu.org's?
You don't. It piggy-backs on wtanaka@mili.eu.org. AKD
responses should
be full-chain keys, not stubs.
[test@ofb.net] from Wesley Tanaka
Do you know if I am supposed to attempt to verify the
signature for answer/key/error AKD responses, which claim to
be signed by (e.g.) "ofb.net"?

[Wesley Tanaka]

Logged In: YES
user_id=11717

[test@ofb.net] from Jacob Mandelson (jlm@ugcs.caltech.edu)
You should. Otherwise someone could be impersonating the
gdomain and
DoS someone's key by sending a bogus NACK.
[test@ofb.net] from Jacob Mandelson (jlm@ugcs.caltech.edu)
But, good point about how to get the ofb.net key then...
[test@ofb.net] from Wesley Tanaka
So the question is, let's say I don't have the public key
for "ofb.net" right now, and . . . right.

[Wesley Tanaka]

Logged In: YES
user_id=11717

if an incoming message is signed by a host key, do not try
to retrieve
the host key. This should work around the problem and
reduce traffic
generated by praya for now.

Checking in wtanaka/praya/gale/GaleReadThread.java;
/cvsroot/praya/praya/wtanaka/praya/gale/GaleReadThread.java,v
<-- GaleReadThread.java
new revision: 1.13; previous revision: 1.12
done