novox/hq
3
0
Fork 0
Code Issues Pull Requests 6 Releases Wiki Activity

Issue 078: module issue's orphan account, refused before it is made

Browse Source
This commit is contained in:
jschoubben
2026-09-21 23:46:51 +02:00
parent faa7196ad6
commit ead8913a74
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
04-ISSUES/078-a-delivered-secret-is-accepted-under-any-name/00-report.md
+1 -1
View File
@@ -2,7 +2,7 @@
status: resolved status: resolved
opened: 2026-09-21 opened: 2026-09-21
located-in: [mesh-controller internal/inventory (secrets)] located-in: [mesh-controller internal/inventory (secrets)]
fixed-by: mesh-controller multiple-fixes (a delivery is refused for a name the module does not declare as an own secret, a requirement it has not got, or a local it does not keep; the refusal names what it does declare); found one stale delivery in the whole-mesh bed on the spot fixed-by: mesh-controller multiple-fixes (a delivery is refused for a name the module does not declare as an own secret, a requirement it has not got, or a local it does not keep; the refusal names what it does declare); module issue refuses a module with no broker secret before making the account; found one stale delivery in the whole-mesh bed and one orphan account the mesh itself made
--- ---
# 078 — A delivered secret is accepted under any name # 078 — A delivered secret is accepted under any name
04-ISSUES/078-a-delivered-secret-is-accepted-under-any-name/01-diagnosis.md
+7
View File
@@ -15,3 +15,10 @@ authority on what a module holds. Proven by unit tests against the store: a deli
undeclared name is refused naming the declared ones; under a declared name it is kept; to an undeclared name is refused naming the declared ones; under a declared name it is kept; to an
unknown module it is refused with the remedy; a pair delivery for a requirement the module has not unknown module it is refused with the remedy; a pair delivery for a requirement the module has not
got, or with no local where several are kept, or under a local it does not keep, is refused. got, or with no local where several are kept, or under a local it does not keep, is refused.
*Later the same day.* The refusal caught the mesh itself: `module issue` made a broker account
for any module and delivered it as the own secret named `broker`, whether or not the module
declared one — a bed issuing the certificate authority, which speaks on no bus, left an account
on the broker that nothing would ever read. `module issue` now refuses a module with no `broker`
own secret before the account is made. An own secret the mesh mints (the authority's password)
never needed an issue: it is minted when the node is resolved.