def signup_attempt_timed_out(self, signup_nonce, pbft_settings_view,
block_cache):
"""Checks whether too many blocks have elapsed since
since the registration attempt.
Args:
signup_nonce (string): nonce (~ block id) used in signup
pbft_settings_view (BgtSettingsView): The current Bgt config view
block_cache (BlockCache): The block store cache
Returns:
bool: True if too many blocks have elapsed; False if you just need
to chill out a little while longer.
"""
# It's tempting to set this timeout as the lesser of retry_delay
# and signup_commit_maximum_delay, but then we can't individually
# control this timeout behavior. Consider behavior as a new node joins
# an old network.
depth = pbft_settings_view.registration_retry_delay
i = 0
for block in block_cache.block_store.get_block_iter(reverse=True):
if i > depth:
return True
block_id = block.identifier
if signup_nonce == SignupInfo.block_id_to_nonce(block_id):
return False
i += 1
return False
def _create_proposal(self, block_header, pbft_enclave_module):
"""
proposal request
"""
public_key_hash = hashlib.sha256(block_header.signer_public_key.encode()).hexdigest()
nonce = SignupInfo.block_id_to_nonce(block_header.previous_block_id)
setting = 'sawtooth.consensus.pbft.max_log_size'
if False:
# try to set pbft params
proposal = SettingProposal(
setting=setting,
value='1003',
nonce=nonce)
payload = SettingsPayload(data=proposal.SerializeToString(),action=SettingsPayload.PROPOSE)
serialized = payload.SerializeToString()
input_addresses = _config_inputs(setting)
output_addresses = _config_outputs(setting)
header = txn_pb.TransactionHeader(
signer_public_key=block_header.signer_public_key,
family_name='sawtooth_settings',
family_version='1.0',
inputs=input_addresses,
outputs=output_addresses,
dependencies=[],
payload_sha512=hashlib.sha512(serialized).hexdigest(),
batcher_public_key=block_header.signer_public_key,
nonce=hex(random.randint(0, 2**64))).SerializeToString()
signature = self._batch_publisher.identity_signer.sign(header)
transaction = txn_pb.Transaction(
header=header,
payload=serialized,
header_signature=signature)
LOGGER.info('payload action=%s nonce=%s',
payload.action,
nonce)
self._batch_publisher.send([transaction])
else:
# get setting
pass
def validator_signup_was_committed_too_late(self, validator_info,
pbft_settings_view,
block_cache):
"""Determines if a validator's registry transaction committing it
current PBFT keys, etc., was committed too late - i.e., the number of
blocks between when the transaction was submitted and when it was
committed is greater than signup commit maximum delay.
Args:
validator_info (BgxValidatorInfo): The current validator information
pbft_settings_view (BgtSettingsView): The current Bgt config view
block_cache (BlockCache): The block store cache
Returns:
bool: True if the validator's registry transaction was committed
beyond the signup commit maximum delay, False otherwise
"""
# Figure out the block in which the current validator information
# was committed.
try:
block = block_cache.block_store.get_block_by_transaction_id(
validator_info.transaction_id)
except ValueError:
LOGGER.warning(
'Validator %s (ID=%s...%s): Signup txn %s not found in block.',
validator_info.name, validator_info.id[:8],
validator_info.id[-8:], validator_info.transaction_id[:8])
return False
commit_block_id = block.identifier
# Starting with that block's immediate predecessor, walk back until
# either we match the block ID with the nonce field in the signup
# info, we have checked the maximum number of blocks, or we somehow
# reached the beginning of the blockchain. The first case is
# success (i.e., the validator signup info passed the freshness
# test) while the other two cases are failure.
for _ in range(pbft_settings_view.signup_commit_maximum_delay + 1):
if SignupInfo.block_id_to_nonce(block.previous_block_id) == \
validator_info.signup_info.nonce:
LOGGER.debug(
'Validator %s (ID=%s...%s): Signup committed block %s, '
'chain head was block %s', validator_info.name,
validator_info.id[:8], validator_info.id[-8:],
commit_block_id[:8], block.previous_block_id[:8])
return False
if utils.block_id_is_genesis(block.previous_block_id):
LOGGER.info(
'Validator %s (ID=%s...%s): Signup committed block %s, '
'hit start of blockchain looking for block %s',
validator_info.name, validator_info.id[:8],
validator_info.id[-8:], commit_block_id[:8],
validator_info.signup_info.nonce[:8])
return True
block = block_cache[block.previous_block_id]
LOGGER.info(
'Validator %s (ID=%s...%s): Signup committed block %s, failed to '
'find block with ID ending in %s in %d previous block(s)',
validator_info.name, validator_info.id[:8], validator_info.id[-8:],
commit_block_id[:8], validator_info.signup_info.nonce,
pbft_settings_view.signup_commit_maximum_delay + 1)
return True
def _register_signup_information(self,
block_header,
pbft_enclave_module=None):
# Create signup information for this validator, putting the block ID
# of the block previous to the block referenced by block_header in the
# nonce. Block ID is better than wait certificate ID for testing
# freshness as we need to account for non-BGT blocks.
LOGGER.debug('_register_signup_information: TRY to REGISTER')
public_key_hash = hashlib.sha256(
block_header.signer_public_key.encode()).hexdigest()
nonce = SignupInfo.block_id_to_nonce(block_header.previous_block_id)
pbft_public_key = self._validator_id
anti_sybil_id = hashlib.sha256(pbft_public_key.encode()).hexdigest()
signup_data = {
'pbft_public_key': pbft_public_key,
}
sealed_signup_data = base64.b64encode(
dict2json(signup_data).encode()).decode('utf-8')
"""
signup_info = SignupInfo.create_signup_info(
pbft_enclave_module=pbft_enclave_module,
originator_public_key_hash=public_key_hash,
nonce=nonce)
"""
# Create the validator registry payload
payload = vr_pb.BgxValidatorRegistryPayload(
verb='register',
name='validator-{}'.format(block_header.signer_public_key[:8]),
id=block_header.signer_public_key,
node=self._node,
signup_info=vr_pb.BgxSignUpInfo(
pbft_public_key=pbft_public_key, # signup_info.pbft_public_key,
anti_sybil_id=anti_sybil_id, # signup_info.anti_sybil_id,
nonce=nonce),
)
serialized = payload.SerializeToString()
# Create the address that will be used to look up this validator
# registry transaction. Seems like a potential for refactoring..
validator_entry_address = PbftBlockPublisher._validator_registry_namespace + hashlib.sha256(
block_header.signer_public_key.encode()).hexdigest()
# Create a transaction header and transaction for the validator
# registry update amd then hand it off to the batch publisher to
# send out.
output_addresses = [
validator_entry_address, PbftBlockPublisher._validator_map_address
]
input_addresses = output_addresses + \
[SettingsView.setting_address('sawtooth.bgt.report_public_key_pem'),
SettingsView.setting_address('sawtooth.bgt.valid_enclave_measurements'),
SettingsView.setting_address('sawtooth.bgt.valid_enclave_basenames')
]
header = txn_pb.TransactionHeader(
signer_public_key=block_header.signer_public_key,
family_name='bgx_validator_registry',
family_version='1.0',
inputs=input_addresses,
outputs=output_addresses,
dependencies=[],
payload_sha512=hashlib.sha512(serialized).hexdigest(),
batcher_public_key=block_header.signer_public_key,
nonce=hex(random.randint(0, 2**64))).SerializeToString()
signature = self._batch_publisher.identity_signer.sign(header)
transaction = txn_pb.Transaction(header=header,
payload=serialized,
header_signature=signature)
LOGGER.info('Register Validator Name=%s, ID=%s...%s,Nonce=%s',
payload.name, payload.id[:8], payload.id[-8:], nonce)
self._batch_publisher.send([transaction])
# Store the key state so that we can look it up later if need be and
# set the new key as our active key
self._pbft_key_state_store[pbft_public_key] = PbftKeyState(
sealed_signup_data=sealed_signup_data,
has_been_refreshed=False,
signup_nonce=nonce)
self._pbft_key_state_store.active_key = pbft_public_key
LOGGER.debug('_register_signup_information: REGISTER DONE')