Key rotation: log failures, retry, force on new version (#1833)
* Retry failed signed key rotation; start rotation when registered (#1772) * rotateSignedPrekeys: Fix 'res is not defined' error * If the server rejects key rotation, don't retry immediately * Force a signed key rotation on launch of any new version
This commit is contained in:
parent
b8b26d3e79
commit
a5923c2177
4 changed files with 41 additions and 14 deletions
|
@ -83,6 +83,7 @@
|
||||||
|
|
||||||
if (!lastVersion || currentVersion !== lastVersion) {
|
if (!lastVersion || currentVersion !== lastVersion) {
|
||||||
console.log('New version detected:', currentVersion);
|
console.log('New version detected:', currentVersion);
|
||||||
|
getAccountManager().rotateSignedPreKey();
|
||||||
}
|
}
|
||||||
|
|
||||||
window.dispatchEvent(new Event('storage_ready'));
|
window.dispatchEvent(new Event('storage_ready'));
|
||||||
|
@ -90,19 +91,20 @@
|
||||||
console.log('listening for registration events');
|
console.log('listening for registration events');
|
||||||
Whisper.events.on('registration_done', function() {
|
Whisper.events.on('registration_done', function() {
|
||||||
console.log('handling registration event');
|
console.log('handling registration event');
|
||||||
|
Whisper.RotateSignedPreKeyListener.init(Whisper.events);
|
||||||
connect(true);
|
connect(true);
|
||||||
});
|
});
|
||||||
|
|
||||||
var appView = window.owsDesktopApp.appView = new Whisper.AppView({el: $('body')});
|
var appView = window.owsDesktopApp.appView = new Whisper.AppView({el: $('body')});
|
||||||
|
|
||||||
Whisper.WallClockListener.init(Whisper.events);
|
Whisper.WallClockListener.init(Whisper.events);
|
||||||
Whisper.RotateSignedPreKeyListener.init(Whisper.events);
|
|
||||||
Whisper.ExpiringMessagesListener.init(Whisper.events);
|
Whisper.ExpiringMessagesListener.init(Whisper.events);
|
||||||
|
|
||||||
if (Whisper.Import.isIncomplete()) {
|
if (Whisper.Import.isIncomplete()) {
|
||||||
console.log('Import was interrupted, showing import error screen');
|
console.log('Import was interrupted, showing import error screen');
|
||||||
appView.openImporter();
|
appView.openImporter();
|
||||||
} else if (Whisper.Registration.everDone()) {
|
} else if (Whisper.Registration.everDone()) {
|
||||||
|
Whisper.RotateSignedPreKeyListener.init(Whisper.events);
|
||||||
connect();
|
connect();
|
||||||
appView.openInbox({
|
appView.openInbox({
|
||||||
initialLoadComplete: initialLoadComplete
|
initialLoadComplete: initialLoadComplete
|
||||||
|
|
|
@ -38008,14 +38008,21 @@ var TextSecureServer = (function() {
|
||||||
return store.storeSignedPreKey(res.keyId, res.keyPair).then(function() {
|
return store.storeSignedPreKey(res.keyId, res.keyPair).then(function() {
|
||||||
return cleanSignedPreKeys();
|
return cleanSignedPreKeys();
|
||||||
});
|
});
|
||||||
|
});
|
||||||
}).catch(function(e) {
|
}).catch(function(e) {
|
||||||
|
console.log(
|
||||||
|
'rotateSignedPrekey error:',
|
||||||
|
e && e.stack ? e.stack : e
|
||||||
|
);
|
||||||
|
|
||||||
if (e instanceof Error && e.name == 'HTTPError' && e.code >= 400 && e.code <= 599) {
|
if (e instanceof Error && e.name == 'HTTPError' && e.code >= 400 && e.code <= 599) {
|
||||||
var rejections = 1 + textsecure.storage.get('signedKeyRotationRejected', 0);
|
var rejections = 1 + textsecure.storage.get('signedKeyRotationRejected', 0);
|
||||||
textsecure.storage.put('signedKeyRotationRejected', rejections);
|
textsecure.storage.put('signedKeyRotationRejected', rejections);
|
||||||
console.log('Signed key rotation rejected count:', rejections);
|
console.log('Signed key rotation rejected count:', rejections);
|
||||||
|
} else {
|
||||||
|
throw e;
|
||||||
}
|
}
|
||||||
});
|
});
|
||||||
});
|
|
||||||
}.bind(this));
|
}.bind(this));
|
||||||
},
|
},
|
||||||
queueTask: function(task) {
|
queueTask: function(task) {
|
||||||
|
|
|
@ -17,7 +17,10 @@
|
||||||
|
|
||||||
function run() {
|
function run() {
|
||||||
console.log('Rotating signed prekey...');
|
console.log('Rotating signed prekey...');
|
||||||
getAccountManager().rotateSignedPreKey();
|
getAccountManager().rotateSignedPreKey().catch(function() {
|
||||||
|
console.log('rotateSignedPrekey() failed. Trying again in five seconds');
|
||||||
|
setTimeout(runWhenOnline, 5000);
|
||||||
|
});
|
||||||
scheduleNextRotation();
|
scheduleNextRotation();
|
||||||
setTimeoutForNextRun();
|
setTimeoutForNextRun();
|
||||||
}
|
}
|
||||||
|
@ -26,6 +29,7 @@
|
||||||
if (navigator.onLine) {
|
if (navigator.onLine) {
|
||||||
run();
|
run();
|
||||||
} else {
|
} else {
|
||||||
|
console.log('We are offline; keys will be rotated when we are next online');
|
||||||
var listener = function() {
|
var listener = function() {
|
||||||
window.removeEventListener('online', listener);
|
window.removeEventListener('online', listener);
|
||||||
run();
|
run();
|
||||||
|
@ -52,8 +56,15 @@
|
||||||
timeout = setTimeout(runWhenOnline, waitTime);
|
timeout = setTimeout(runWhenOnline, waitTime);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
var initComplete;
|
||||||
Whisper.RotateSignedPreKeyListener = {
|
Whisper.RotateSignedPreKeyListener = {
|
||||||
init: function(events) {
|
init: function(events) {
|
||||||
|
if (initComplete) {
|
||||||
|
console.log('Rotate signed prekey listener: Already initialized');
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
initComplete = true;
|
||||||
|
|
||||||
if (Whisper.Registration.isDone()) {
|
if (Whisper.Registration.isDone()) {
|
||||||
setTimeoutForNextRun();
|
setTimeoutForNextRun();
|
||||||
}
|
}
|
||||||
|
|
|
@ -138,14 +138,21 @@
|
||||||
return store.storeSignedPreKey(res.keyId, res.keyPair).then(function() {
|
return store.storeSignedPreKey(res.keyId, res.keyPair).then(function() {
|
||||||
return cleanSignedPreKeys();
|
return cleanSignedPreKeys();
|
||||||
});
|
});
|
||||||
|
});
|
||||||
}).catch(function(e) {
|
}).catch(function(e) {
|
||||||
|
console.log(
|
||||||
|
'rotateSignedPrekey error:',
|
||||||
|
e && e.stack ? e.stack : e
|
||||||
|
);
|
||||||
|
|
||||||
if (e instanceof Error && e.name == 'HTTPError' && e.code >= 400 && e.code <= 599) {
|
if (e instanceof Error && e.name == 'HTTPError' && e.code >= 400 && e.code <= 599) {
|
||||||
var rejections = 1 + textsecure.storage.get('signedKeyRotationRejected', 0);
|
var rejections = 1 + textsecure.storage.get('signedKeyRotationRejected', 0);
|
||||||
textsecure.storage.put('signedKeyRotationRejected', rejections);
|
textsecure.storage.put('signedKeyRotationRejected', rejections);
|
||||||
console.log('Signed key rotation rejected count:', rejections);
|
console.log('Signed key rotation rejected count:', rejections);
|
||||||
|
} else {
|
||||||
|
throw e;
|
||||||
}
|
}
|
||||||
});
|
});
|
||||||
});
|
|
||||||
}.bind(this));
|
}.bind(this));
|
||||||
},
|
},
|
||||||
queueTask: function(task) {
|
queueTask: function(task) {
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue