mirror of
https://github.com/tendermint/tendermint.git
synced 2026-02-06 12:00:44 +00:00
Refs #1771 ADR: https://github.com/tendermint/tendermint/blob/master/docs/architecture/adr-044-lite-client-with-weak-subjectivity.md ## Commits: * add Verifier and VerifyCommitTrusting * add two more checks make trustLevel an option * float32 for trustLevel * check newHeader time * started writing lite Client * unify Verify methods * ensure h2.Header.bfttime < h1.Header.bfttime + tp * move trust checks into Verify function * add more comments * more docs * started writing tests * unbonding period failures * tests are green * export ErrNewHeaderTooFarIntoFuture * make golangci happy * test for non-adjusted headers * more precision * providers and stores * VerifyHeader and VerifyHeaderAtHeight funcs * fix compile errors * remove lastVerifiedHeight, persist new trusted header * sequential verification * remove TrustedStore option * started writing tests for light client * cover basic cases for linear verification * bisection tests PASS * rename BisectingVerification to SkippingVerification * refactor the code * add TrustedHeader method * consolidate sequential verification tests * consolidate skipping verification tests * rename trustedVals to trustedNextVals * start writing docs * ValidateTrustLevel func and ErrOldHeaderExpired error * AutoClient and example tests * fix errors * update doc * remove ErrNewHeaderTooFarIntoFuture This check is unnecessary given existing a) ErrOldHeaderExpired b) h2.Time > now checks. * return an error if we're at more recent height * add comments * add LastSignedHeaderHeight method to Store I think it's fine if Store tracks last height * copy over proxy from old lite package * make TrustedHeader return latest if height=0 * modify LastSignedHeaderHeight to return an error if no headers exist * copy over proxy impl * refactor proxy and start http lite client * Tx and BlockchainInfo methods * Block method * commit method * code compiles again * lite client compiles * extract updateLiteClientIfNeededTo func * move final parts * add placeholder for tests * force usage of lite http client in proxy * comment out query tests for now * explicitly mention tp: trusting period * verify nextVals in VerifyHeader * refactor bisection * move the NextValidatorsHash check into updateTrustedHeaderAndVals + update the comment * add ConsensusParams method to RPC client * add ConsensusParams to rpc/mock/client * change trustLevel type to a new cmn.Fraction type + update SkippingVerification comment * stress out trustLevel is only used for non-adjusted headers * fixes after Fede's review Co-authored-by: Federico Kunze <31522760+fedekunze@users.noreply.github.com> * compare newHeader with a header from an alternative provider * save pivot header Refs https://github.com/tendermint/tendermint/pull/3989#discussion_r349122824 * check header can still be trusted in TrustedHeader Refs https://github.com/tendermint/tendermint/pull/3989#discussion_r349101424 * lite: update Validators and Block endpoints - Block no longer contains BlockMeta - Validators now accept two additional params: page and perPage * make linter happy
163 lines
5.2 KiB
Go
163 lines
5.2 KiB
Go
package rpc
|
|
|
|
//import (
|
|
// "fmt"
|
|
// "os"
|
|
// "testing"
|
|
// "time"
|
|
|
|
// "github.com/stretchr/testify/assert"
|
|
// "github.com/stretchr/testify/require"
|
|
|
|
// "github.com/tendermint/tendermint/abci/example/kvstore"
|
|
// "github.com/tendermint/tendermint/crypto/merkle"
|
|
// "github.com/tendermint/tendermint/lite"
|
|
// certclient "github.com/tendermint/tendermint/lite/client"
|
|
// nm "github.com/tendermint/tendermint/node"
|
|
// "github.com/tendermint/tendermint/rpc/client"
|
|
// rpctest "github.com/tendermint/tendermint/rpc/test"
|
|
// "github.com/tendermint/tendermint/types"
|
|
//)
|
|
|
|
//var node *nm.Node
|
|
//var chainID = "tendermint_test" // TODO use from config.
|
|
////nolint:unused
|
|
//var waitForEventTimeout = 5 * time.Second
|
|
|
|
//// TODO fix tests!!
|
|
|
|
//func TestMain(m *testing.M) {
|
|
// app := kvstore.NewKVStoreApplication()
|
|
// node = rpctest.StartTendermint(app)
|
|
|
|
// code := m.Run()
|
|
|
|
// rpctest.StopTendermint(node)
|
|
// os.Exit(code)
|
|
//}
|
|
|
|
//func kvstoreTx(k, v []byte) []byte {
|
|
// return []byte(fmt.Sprintf("%s=%s", k, v))
|
|
//}
|
|
|
|
//// TODO: enable it after general proof format has been adapted
|
|
//// in abci/examples/kvstore.go
|
|
////nolint:unused,deadcode
|
|
//func _TestAppProofs(t *testing.T) {
|
|
// assert, require := assert.New(t), require.New(t)
|
|
|
|
// prt := defaultProofRuntime()
|
|
// cl := client.NewLocal(node)
|
|
// client.WaitForHeight(cl, 1, nil)
|
|
|
|
// // This sets up our trust on the node based on some past point.
|
|
// source := certclient.NewProvider(chainID, cl)
|
|
// seed, err := source.LatestFullCommit(chainID, 1, 1)
|
|
// require.NoError(err, "%#v", err)
|
|
// cert := lite.NewBaseVerifier(chainID, seed.Height(), seed.Validators)
|
|
|
|
// // Wait for tx confirmation.
|
|
// done := make(chan int64)
|
|
// go func() {
|
|
// evtTyp := types.EventTx
|
|
// _, err = client.WaitForOneEvent(cl, evtTyp, waitForEventTimeout)
|
|
// require.Nil(err, "%#v", err)
|
|
// close(done)
|
|
// }()
|
|
|
|
// // Submit a transaction.
|
|
// k := []byte("my-key")
|
|
// v := []byte("my-value")
|
|
// tx := kvstoreTx(k, v)
|
|
// br, err := cl.BroadcastTxCommit(tx)
|
|
// require.NoError(err, "%#v", err)
|
|
// require.EqualValues(0, br.CheckTx.Code, "%#v", br.CheckTx)
|
|
// require.EqualValues(0, br.DeliverTx.Code)
|
|
// brh := br.Height
|
|
|
|
// // Fetch latest after tx commit.
|
|
// <-done
|
|
// latest, err := source.LatestFullCommit(chainID, 1, 1<<63-1)
|
|
// require.NoError(err, "%#v", err)
|
|
// rootHash := latest.SignedHeader.AppHash
|
|
// if rootHash == nil {
|
|
// // Fetch one block later, AppHash hasn't been committed yet.
|
|
// // TODO find a way to avoid doing this.
|
|
// client.WaitForHeight(cl, latest.SignedHeader.Height+1, nil)
|
|
// latest, err = source.LatestFullCommit(chainID, latest.SignedHeader.Height+1, 1<<63-1)
|
|
// require.NoError(err, "%#v", err)
|
|
// rootHash = latest.SignedHeader.AppHash
|
|
// }
|
|
// require.NotNil(rootHash)
|
|
|
|
// // verify a query before the tx block has no data (and valid non-exist proof)
|
|
// bs, height, proof, err := GetWithProof(prt, k, brh-1, cl, cert)
|
|
// require.NoError(err, "%#v", err)
|
|
// require.NotNil(proof)
|
|
// require.Equal(height, brh-1)
|
|
// // require.NotNil(proof)
|
|
// // TODO: Ensure that *some* keys will be there, ensuring that proof is nil,
|
|
// // (currently there's a race condition)
|
|
// // and ensure that proof proves absence of k.
|
|
// require.Nil(bs)
|
|
|
|
// // but given that block it is good
|
|
// bs, height, proof, err = GetWithProof(prt, k, brh, cl, cert)
|
|
// require.NoError(err, "%#v", err)
|
|
// require.NotNil(proof)
|
|
// require.Equal(height, brh)
|
|
|
|
// assert.EqualValues(v, bs)
|
|
// err = prt.VerifyValue(proof, rootHash, string(k), bs) // XXX key encoding
|
|
// assert.NoError(err, "%#v", err)
|
|
|
|
// // Test non-existing key.
|
|
// missing := []byte("my-missing-key")
|
|
// bs, _, proof, err = GetWithProof(prt, missing, 0, cl, cert)
|
|
// require.NoError(err)
|
|
// require.Nil(bs)
|
|
// require.NotNil(proof)
|
|
// err = prt.VerifyAbsence(proof, rootHash, string(missing)) // XXX VerifyAbsence(), keyencoding
|
|
// assert.NoError(err, "%#v", err)
|
|
// err = prt.VerifyAbsence(proof, rootHash, string(k)) // XXX VerifyAbsence(), keyencoding
|
|
// assert.Error(err, "%#v", err)
|
|
//}
|
|
|
|
//func TestTxProofs(t *testing.T) {
|
|
// assert, require := assert.New(t), require.New(t)
|
|
|
|
// cl := client.NewLocal(node)
|
|
// client.WaitForHeight(cl, 1, nil)
|
|
|
|
// tx := kvstoreTx([]byte("key-a"), []byte("value-a"))
|
|
// br, err := cl.BroadcastTxCommit(tx)
|
|
// require.NoError(err, "%#v", err)
|
|
// require.EqualValues(0, br.CheckTx.Code, "%#v", br.CheckTx)
|
|
// require.EqualValues(0, br.DeliverTx.Code)
|
|
// brh := br.Height
|
|
|
|
// source := certclient.NewProvider(chainID, cl)
|
|
// seed, err := source.LatestFullCommit(chainID, brh-2, brh-2)
|
|
// require.NoError(err, "%#v", err)
|
|
// cert := lite.NewBaseVerifier(chainID, seed.Height(), seed.Validators)
|
|
|
|
// // First let's make sure a bogus transaction hash returns a valid non-existence proof.
|
|
// key := types.Tx([]byte("bogus")).Hash()
|
|
// _, err = cl.Tx(key, true)
|
|
// require.NotNil(err)
|
|
// require.Contains(err.Error(), "not found")
|
|
|
|
// // Now let's check with the real tx root hash.
|
|
// key = types.Tx(tx).Hash()
|
|
// res, err := cl.Tx(key, true)
|
|
// require.NoError(err, "%#v", err)
|
|
// require.NotNil(res)
|
|
// keyHash := merkle.SimpleHashFromByteSlices([][]byte{key})
|
|
// err = res.Proof.Validate(keyHash)
|
|
// assert.NoError(err, "%#v", err)
|
|
|
|
// commit, err := GetCertifiedCommit(br.Height, cl, cert)
|
|
// require.Nil(err, "%#v", err)
|
|
// require.Equal(res.Proof.RootHash, commit.Header.DataHash)
|
|
//}
|