130 lines
4.0 KiB
C
130 lines
4.0 KiB
C
#include <ccan/crypto/shachain/shachain.h>
|
|
#include <ccan/short_types/short_types.h>
|
|
#include <ccan/tal/tal.h>
|
|
#include <ccan/opt/opt.h>
|
|
#include <ccan/str/hex/hex.h>
|
|
#include <ccan/err/err.h>
|
|
#include <ccan/read_write_all/read_write_all.h>
|
|
#include "lightning.pb-c.h"
|
|
#include "bitcoin/base58.h"
|
|
#include "pkt.h"
|
|
#include "bitcoin/script.h"
|
|
#include "permute_tx.h"
|
|
#include "bitcoin/signature.h"
|
|
#include "commit_tx.h"
|
|
#include "bitcoin/pubkey.h"
|
|
#include "bitcoin/privkey.h"
|
|
#include "find_p2sh_out.h"
|
|
#include "protobuf_convert.h"
|
|
#include "gather_updates.h"
|
|
#include "funding.h"
|
|
#include "version.h"
|
|
#include <unistd.h>
|
|
|
|
int main(int argc, char *argv[])
|
|
{
|
|
const tal_t *ctx = tal_arr(NULL, char, 0);
|
|
struct sha256 seed, preimage, our_rhash, their_rhash;
|
|
OpenChannel *o1, *o2;
|
|
OpenAnchor *a;
|
|
struct bitcoin_tx *commit;
|
|
struct pkt *pkt;
|
|
struct bitcoin_signature sig;
|
|
struct privkey privkey;
|
|
bool testnet;
|
|
struct pubkey pubkey1, pubkey2;
|
|
u8 *redeemscript;
|
|
size_t num_updates;
|
|
struct channel_state *cstate;
|
|
|
|
err_set_progname(argv[0]);
|
|
|
|
opt_register_noarg("--help|-h", opt_usage_and_exit,
|
|
"<seed> <open-channel-file1> <open-channel-file2> <open-anchor-file> <commit-privkey> <all-previous-updates>...\n"
|
|
"Create a new update-channel-signature message",
|
|
"Print this message.");
|
|
opt_register_version();
|
|
|
|
opt_parse(&argc, argv, opt_log_stderr_exit);
|
|
|
|
if (argc < 8)
|
|
opt_usage_exit_fail("Expected 7+ arguments");
|
|
|
|
if (!hex_decode(argv[1], strlen(argv[1]), &seed, sizeof(seed)))
|
|
errx(1, "Invalid seed '%s' - need 256 hex bits", argv[1]);
|
|
|
|
o1 = pkt_from_file(argv[2], PKT__PKT_OPEN)->open;
|
|
o2 = pkt_from_file(argv[3], PKT__PKT_OPEN)->open;
|
|
a = pkt_from_file(argv[4], PKT__PKT_OPEN_ANCHOR)->open_anchor;
|
|
|
|
if (!key_from_base58(secp256k1_context_create(SECP256K1_CONTEXT_VERIFY
|
|
| SECP256K1_CONTEXT_SIGN),
|
|
argv[5], strlen(argv[5]), &testnet, &privkey, &pubkey1))
|
|
errx(1, "Invalid private key '%s'", argv[5]);
|
|
if (!testnet)
|
|
errx(1, "Private key '%s' not on testnet!", argv[5]);
|
|
|
|
sig.stype = SIGHASH_ALL;
|
|
|
|
/* Figure out cumulative delta since anchor. */
|
|
cstate = gather_updates(ctx, o1, o2, a,
|
|
commit_fee(o1->commitment_fee,
|
|
o2->commitment_fee),
|
|
argv + 6,
|
|
&num_updates,
|
|
&our_rhash, &their_rhash, &sig.sig);
|
|
if (num_updates < 1)
|
|
errx(1, "Expected at least one update!");
|
|
|
|
/* Give up revocation preimage for old tx. */
|
|
shachain_from_seed(&seed, num_updates - 1, &preimage);
|
|
|
|
/* Get pubkeys */
|
|
if (!proto_to_pubkey(secp256k1_context_create(0),
|
|
o1->commit_key, &pubkey2))
|
|
errx(1, "Invalid o1 commit pubkey");
|
|
if (!pubkey_eq(&pubkey1, &pubkey2))
|
|
errx(1, "o1 pubkey != this privkey");
|
|
if (!proto_to_pubkey(secp256k1_context_create(0),
|
|
o2->commit_key, &pubkey2))
|
|
errx(1, "Invalid o2 commit pubkey");
|
|
|
|
/* This is what the anchor pays to. */
|
|
redeemscript = bitcoin_redeem_2of2(ctx, &pubkey1, &pubkey2);
|
|
|
|
/* Check our new commit is signed correctly by them. */
|
|
commit = commit_tx_from_pkts(ctx, o1, o2, a, &our_rhash, cstate);
|
|
if (!commit)
|
|
errx(1, "Invalid packets");
|
|
|
|
/* Check their signature signs this input correctly. */
|
|
if (!check_tx_sig(secp256k1_context_create(SECP256K1_CONTEXT_VERIFY),
|
|
commit, 0, redeemscript, tal_count(redeemscript),
|
|
&pubkey2, &sig))
|
|
errx(1, "Invalid signature.");
|
|
|
|
/* Now create THEIR new commitment tx to spend 2/2 output of anchor. */
|
|
invert_cstate(cstate);
|
|
commit = commit_tx_from_pkts(ctx, o2, o1, a, &their_rhash, cstate);
|
|
if (!commit)
|
|
errx(1, "Invalid packets");
|
|
|
|
/* Their pubkey must be valid */
|
|
if (!proto_to_pubkey(secp256k1_context_create(0),
|
|
o2->commit_key, &pubkey2))
|
|
errx(1, "Invalid public open-channel-file2");
|
|
|
|
/* Sign it for them. */
|
|
sign_tx_input(secp256k1_context_create(SECP256K1_CONTEXT_SIGN),
|
|
commit, 0, redeemscript, tal_count(redeemscript),
|
|
&privkey, &pubkey1, &sig.sig);
|
|
|
|
pkt = update_signature_pkt(ctx, &sig.sig, &preimage);
|
|
if (!write_all(STDOUT_FILENO, pkt, pkt_totlen(pkt)))
|
|
err(1, "Writing out packet");
|
|
|
|
tal_free(ctx);
|
|
return 0;
|
|
}
|
|
|