iroha icon indicating copy to clipboard operation
iroha copied to clipboard

Genesis is signed with correct key

Open mversic opened this issue 1 year ago • 1 comments

When genesis is received via listen for genesis via sumeragi_listen_for_genesis(BlockCreated/BlockSyncUpdate) it is not verified that genesis is signed with IROHA_GENESIS_PUBLIC_KEY. Not even leader that creates the genesis block verifies that genesis is signed with correct key in sumeragi_init_commit_genesis

mversic avatar Feb 05 '24 06:02 mversic

flow to reproduce use one genesis_private_key with the peer submitting a genesis block and give a different genesis_public_key to other peers

just use different key pairs on different nodes for genesis account

docker-compose.yml.zip

image.png

timofeevmd avatar Feb 06 '24 14:02 timofeevmd