Merge pull request #65 from attestantio/require-generation-passphrase

Ensure generation passphrase is present for DKG.

CHANGELOG.md

@@ -2,6 +2,7 @@
   - run slashing protection database garbage collection periodically
   - add commit hash to log on startup
   - enable gzip compression
+  - disallow generation of distributed accounts without passphrases
 
 # Version 1.2.0
   - add Amazon Secrets Manager (ASM) confidant

main.go

@@ -621,6 +621,9 @@ func startProcess(ctx context.Context,
 			return nil, errors.Wrap(err, "failed to obtain account generation passphrase for process")
 		}
 	}
+	if len(generationPassphrase) == 0 {
+		log.Warn().Msg("No generation password supplied; distributed key generation cannot take place")
+	}
 
 	processSvc, err := standardprocess.New(ctx,
 		standardprocess.WithLogLevel(util.LogLevel("process")),

services/process/standard/service.go

@@ -97,6 +97,11 @@ func (s *Service) OnPrepare(ctx context.Context,
 	defer span.Finish()
 	log.Trace().Uint64("sender_id", senderID).Str("account", account).Msg("Preparing for distributed key generation")
 
+	if len(s.generationPassphrase) == 0 {
+		log.Error().Msg("Instance does not have a generation passphrase; cannot continue")
+		return ErrNotCreated
+	}
+
 	s.generationsMu.Lock()
 	defer s.generationsMu.Unlock()