record. It gets it's name as it is the "book-keeper" for
Lokun. It does a lot of things; authorizes or denies users access
to VPN servers, recieves payments, holds the little customer data we have (no other
information is stored by us about our users).
We believe in free software and thus
record is licensed as AGPL.
Dependencies from apt:
Install before pip packages.
Python packages needed
DalPay crypto protocol
This protocol follows the Encrypt-Then-MAC principle and the main objective for implementing this protocol is to prevent disclosure of the username to DalPay (or any other payment processor for that matter), since DalPay have the name, address and card number of a customer.
When a user initiates a DalPay transaction, a message is placed in the
parameter sent to dalpay from
www.lokun.is. This parameter is then included
in the callback that is sent to api.lokun.is. The message follows the following
AES_ENCRYPT(Base64("Username$Nonce"), key) $ Nonce $ IV $ HMAC
This is done to ensure that a 3-rd party handling payments doesn't have the information required to associate card details with a Lokun username.
Do note that this project depends on other parts of Lokun that are not included
on github. These are
Main: Benedikt Kristinsson firstname.lastname@example.org
Karl Emil Karlsson email@example.com