[mkt] set up a custom receipt signer for payments-alt

RESOLVED FIXED

Status

P1
normal
RESOLVED FIXED
4 years ago
4 years ago

People

(Reporter: kumar, Assigned: jason)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

In bug 1021822 we gave payments-alt its own receiptcheck service but now we're getting 'Certificate issuer invalid' errors. We need a custom signer service for payments-alt too. I'm sure a bunch of settings will need to be synced for this but I'm not sure what.
(Assignee)

Updated

4 years ago
Assignee: server-ops-amo → jthomas
(Assignee)

Updated

4 years ago
Priority: -- → P1
(Assignee)

Comment 1

4 years ago
I've setup http://paymentsalt-signer.stage.addons.phx1.mozilla.com and configured payments-alt.allizom.org to use this service. A new JWK was generated for this service and is located at https://payments-alt-cdn.allizom.org/public_keys/root_pub.jwk

>>> receipt_signer()
15:24:45 z.crypto:INFO Calling service: http://paymentsalt-signer.stage.addons.phx1.mozilla.com/1.0/sign :/data/addons-stage/src/payments-alt.allizom.org/zamboni/lib/crypto/receipt.py:33
15:24:45 z.crypto:INFO Receipt contents: {"product": {"url": "http://not-valid.com", "storedata": "id=1"}, "reissue": "https://payments-alt.allizom.org/not-valid", "user": {"type": "directed-identifier", "value": "something-not-valid"}, "exp": 1403306685, "verify": "https://payments-alt.allizom.org/not-valid", "iss": "https://payments-alt.allizom.org", "iat": 1403303085, "typ": "purchase-receipt", "detail": "https://payments-alt.allizom.org/not-valid", "nbf": 1403303085} :/data/addons-stage/src/payments-alt.allizom.org/zamboni/lib/crypto/receipt.py:34
('', 'Signer working and up to date')
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED
Component: Server Operations: AMO Operations → Operations: Marketplace
Product: mozilla.org → Mozilla Services
You need to log in before you can comment on or make changes to this bug.