mirror of
https://gitlab.computer.surgery/matrix/grapevine.git
synced 2025-12-16 23:31:24 +01:00
Better debugging for signing key fetching
This commit is contained in:
parent
9e6a5e6604
commit
5691cf0868
1 changed files with 20 additions and 9 deletions
|
|
@ -1909,17 +1909,24 @@ impl Service {
|
|||
query_via_trusted_servers: bool,
|
||||
) -> Result<SigningKeys> {
|
||||
let contains_all_ids = |keys: &SigningKeys| {
|
||||
signature_ids.iter().all(|id| {
|
||||
keys.verify_keys
|
||||
for id in &signature_ids {
|
||||
let in_verify_keys = keys
|
||||
.verify_keys
|
||||
.keys()
|
||||
.map(ToString::to_string)
|
||||
.any(|key_id| id == &key_id)
|
||||
|| keys
|
||||
.old_verify_keys
|
||||
.keys()
|
||||
.map(ToString::to_string)
|
||||
.any(|key_id| id == &key_id)
|
||||
})
|
||||
.any(|key_id| id == &key_id);
|
||||
let in_old_verify_keys = keys
|
||||
.old_verify_keys
|
||||
.keys()
|
||||
.map(ToString::to_string)
|
||||
.any(|key_id| id == &key_id);
|
||||
|
||||
if !in_verify_keys && !in_old_verify_keys {
|
||||
trace!(id, "signature key not yet in known set");
|
||||
return false;
|
||||
}
|
||||
}
|
||||
true
|
||||
};
|
||||
|
||||
let permit = services()
|
||||
|
|
@ -1982,6 +1989,9 @@ impl Service {
|
|||
|
||||
debug!(
|
||||
server = %origin,
|
||||
key_ids = ?result.verify_keys.keys().collect::<Vec<_>>(),
|
||||
old_key_ids =
|
||||
?result.old_verify_keys.keys().collect::<Vec<_>>(),
|
||||
ts_threshold = %ts_threshold.get(),
|
||||
ts_valid_until = %result.valid_until_ts.get(),
|
||||
"Loaded signing keys for server",
|
||||
|
|
@ -2000,6 +2010,7 @@ impl Service {
|
|||
}
|
||||
|
||||
expires_soon_or_has_expired = true;
|
||||
trace!("Found all keys, but they will expire too soon");
|
||||
}
|
||||
}
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue