Skip to content
master
Switch branches/tags
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
rrd
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

lokun-record

This is record. It gets it's name as it is the "book-keeper" for Lokun. It does a lot of things; authorizes or denies users access to VPN servers, recieves payments, holds the little customer data we have (no other information is stored by us about our users).

Lokun

We believe in free software and thus record is licensed as AGPL.

Dependencies from apt:

Install before pip packages.

  • python
  • python-pip
  • nsis
  • openssl
  • python-dev
  • build-essentials
  • pdftk
  • libffi-dev
  • libssl-dev

Python packages needed

  • json
  • sqlite3
  • bottle
  • BeautifulSoup
  • quopri
  • pycrypto
  • webtest
  • netaddr
  • fdfgen
  • pyopenssl
  • ndg-httpsclient
  • pyasn1
  • dnspython

DalPay crypto protocol

This protocol follows the Encrypt-Then-MAC principle and the main objective for implementing this protocol is to prevent disclosure of the username to DalPay (or any other payment processor for that matter), since DalPay have the name, address and card number of a customer.

When a user initiates a DalPay transaction, a message is placed in the user1 parameter sent to dalpay from www.lokun.is. This parameter is then included in the callback that is sent to api.lokun.is. The message follows the following protocol:

 AES_ENCRYPT(Base64("Username$Nonce"), key) $ Nonce $ IV $ HMAC

This is done to ensure that a 3-rd party handling payments doesn't have the information required to associate card details with a Lokun username.

Other parts

Do note that this project depends on other parts of Lokun that are not included on github. These are keycontrol and reikningar.

Maintainers

Main: Benedikt Kristinsson benedikt@lokun.is

Karl Emil Karlsson kalli@lokun.is

About

No description, website, or topics provided.

Resources

License

Packages

No packages published