1025122 - [mkt] set up a custom receipt signer for payments-alt

Status: RESOLVED FIXED

(Cloud Services :: Operations: Marketplace, task, P1)

Description

[Kumar McMillan [:kumar]]

In bug 1021822 we gave payments-alt its own receiptcheck service but now we're getting 'Certificate issuer invalid' errors. We need a custom signer service for payments-alt too. I'm sure a bunch of settings will need to be synced for this but I'm not sure what.

Comment 1

[Jason Thomas [:jason]]

I've setup http://paymentsalt-signer.stage.addons.phx1.mozilla.com and configured payments-alt.allizom.org to use this service. A new JWK was generated for this service and is located at https://payments-alt-cdn.allizom.org/public_keys/root_pub.jwk

>>> receipt_signer()
15:24:45 z.crypto:INFO Calling service: http://paymentsalt-signer.stage.addons.phx1.mozilla.com/1.0/sign :/data/addons-stage/src/payments-alt.allizom.org/zamboni/lib/crypto/receipt.py:33
15:24:45 z.crypto:INFO Receipt contents: {"product": {"url": "http://not-valid.com", "storedata": "id=1"}, "reissue": "https://payments-alt.allizom.org/not-valid", "user": {"type": "directed-identifier", "value": "something-not-valid"}, "exp": 1403306685, "verify": "https://payments-alt.allizom.org/not-valid", "iss": "https://payments-alt.allizom.org", "iat": 1403303085, "typ": "purchase-receipt", "detail": "https://payments-alt.allizom.org/not-valid", "nbf": 1403303085} :/data/addons-stage/src/payments-alt.allizom.org/zamboni/lib/crypto/receipt.py:34
('', 'Signer working and up to date')