Pages:
Author

Topic: GLBSE's latest updates (an early Christmas present for non-techies) - page 9. (Read 24071 times)

hero member
Activity: 602
Merit: 513
GLBSE Support [email protected]
so each time we login do we have to retrieve our user id and pgp key?

Yes, think of it as a long username and password. keep them in a textfile.

And yes you need to re-enter your orders.
legendary
Activity: 1764
Merit: 1002
wait a minute.  logged out and now can't log back in using same user id and unenrypted private key.  get an "invalid rsa private key" message and then it locks up in "Executing" mode.
legendary
Activity: 1764
Merit: 1002
so each time we login do we have to retrieve our user id and pgp key?
legendary
Activity: 1764
Merit: 1002
one other thing; do i have to do this process everytime i sign in? Undecided

This.


very nice.  how about "balance"?

Mine shows in the upper left corner of my screen.

you're right; there it is.
so do we have to reenter previously existing orders?
hero member
Activity: 700
Merit: 500
one other thing; do i have to do this process everytime i sign in? Undecided

This.


very nice.  how about "balance"?

Mine shows in the upper left corner of my screen.
sr. member
Activity: 343
Merit: 250
PM sent. Thanks.

Damn !!!

I managed to overwrite my existing .blackmarket3.rsa when I was prepping to try the web client.

What's the process for recovering the account it was attached to ?

I know the user ID and the password. I can also state exactly what the current contents of the folio is. I can also tell you what the deposit address was.


* Can I also get a bug raised to cover the python client shouldn't write the .blackmarket3.rsa file, if one already exists. *

Ouch, no process.

The private key is the only way to prove you own an account, the password only encrypted your private key on your local machine.

How much bitcoin did you have in the account?
pm me all your account details.
hero member
Activity: 700
Merit: 500
this is what i get back when typing in command line.  yes i used my "name" and "mypass" but want to hide them here:


C:\Users\name>openssl rsa -in .blackmarket3.rsa -out .blackmarket3-non-AES.rsa -passin pass:mypass
'openssl' is not recognized as an internal or external command,
operable program or batch file.

I had this same problem on my Win 7 machine, but got it fixed.

I dug around my HD and found a directory called "OpenSSL-Win32" inside that there is a directory called "bin". I went in there and found the openssl.exe file. I copied my blackmarket3.rsa file into the bin directory and then just used the same command nefario posted "openssl etc etc" and it worked fine.
legendary
Activity: 1764
Merit: 1002
very nice.  how about "balance"?
legendary
Activity: 1764
Merit: 1002
one other thing; do i have to do this process everytime i sign in? Undecided
legendary
Activity: 1764
Merit: 1002
Wow, i'm in.  but before i look around, what are the commands to re-encrypt my key?
hero member
Activity: 602
Merit: 513
GLBSE Support [email protected]
Damn !!!

I managed to overwrite my existing .blackmarket3.rsa when I was prepping to try the web client.

What's the process for recovering the account it was attached to ?

I know the user ID and the password. I can also state exactly what the current contents of the folio is. I can also tell you what the deposit address was.


* Can I also get a bug raised to cover the python client shouldn't write the .blackmarket3.rsa file, if one already exists. *

Ouch, no process.

The private key is the only way to prove you own an account, the password only encrypted your private key on your local machine.

How much bitcoin did you have in the account?
pm me all your account details.
hero member
Activity: 602
Merit: 513
GLBSE Support [email protected]
Uh. Transferring private keys over plain HTTP? No thanks.

If you've already got an account, and have your private key decrypted on your local machine then it's not sent at all.
It's a javascript version of the python client, it signs all messages with your private key, the messages are sent to the server and verified by your public key.

As I said, the key generation is there for convienience, security minded people wont use it, it's optional.
sr. member
Activity: 364
Merit: 250
Uh. Transferring private keys over plain HTTP? No thanks.
sr. member
Activity: 343
Merit: 250
Damn !!!

I managed to overwrite my existing .blackmarket3.rsa when I was prepping to try the web client.

What's the process for recovering the account it was attached to ?

I know the user ID and the password. I can also state exactly what the current contents of the folio is. I can also tell you what the deposit address was.


* Can I also get a bug raised to cover the python client shouldn't write the .blackmarket3.rsa file, if one already exists. *
legendary
Activity: 1764
Merit: 1002
this is what i get back when typing in command line.  yes i used my "name" and "mypass" but want to hide them here:


C:\Users\name>openssl rsa -in .blackmarket3.rsa -out .blackmarket3-non-AES.rsa -passin pass:mypass
'openssl' is not recognized as an internal or external command,
operable program or batch file.

try openssl.exe, or try to put the full path to the openssl executable.

in that case do the private key and executable have to be in the same folder?
hero member
Activity: 602
Merit: 513
GLBSE Support [email protected]
this is what i get back when typing in command line.  yes i used my "name" and "mypass" but want to hide them here:


C:\Users\name>openssl rsa -in .blackmarket3.rsa -out .blackmarket3-non-AES.rsa -passin pass:mypass
'openssl' is not recognized as an internal or external command,
operable program or batch file.

try openssl.exe, or try to put the full path to the openssl executable.
legendary
Activity: 1764
Merit: 1002
this is what i get back when typing in command line.  yes i used my "name" and "mypass" but want to hide them here:


C:\Users\name>openssl rsa -in .blackmarket3.rsa -out .blackmarket3-non-AES.rsa -passin pass:mypass
'openssl' is not recognized as an internal or external command,
operable program or batch file.
member
Activity: 84
Merit: 10
REF
hero member
Activity: 529
Merit: 500
I'll need to take a closer look at this later. Good work on the site over the past 2 weeks or so Iv seen you ever active in the development of the site.
hero member
Activity: 602
Merit: 513
GLBSE Support [email protected]
Important reminder - back up your .blackmarket3.rsa private key file NOW.

I've made quite a few updates over the last week on both the server and python client.

Firstly for the server there is this.

Client
Motions
With thanks for kokjo for fixing the motions bug. You can now view the contents of all motions without any errors.

List assets
Using the command line client you can see all the assets on the exchange.

Recall
For every who has issued shares they want to recall you can now do this, the recall command will take issued assets out of circulations, the ones in the issuers account.

See your History
Specify your transaction history (using the command line client), see as many entries in bitcoin, asset, and market history as you like.

And finally, the big piece of news, this is what has been keeping me up at night.

Web based client
With much thanks to Jere Jones (who has been well paid for this task)


Start here

If you already have a glbse account you want to login, not register.

Written as a single html page, the web based client performs most (not all) the functionallity of the command line. For the average user/issuer it will cover all their needs, and compared to bmc.py, it's soooo pretty.

And best of all, it handles bitcoin as normal decimal instead of the more difficult to use int64(as is still the case with bmc.py)

Using the web based client

If you already have an account on GLBSE, then you'll probably want to use that.

Firstly get your account number, bmc.py user
Then you will need your unencrypted private key.

Your key is probably not unencrypted so to unencrypt it you must:

RSA file decrypt using openssl
Make sure you're in the same directory as your .blackmarket3.rsa file
Code:
openssl rsa -in .blackmarket3.rsa -out .blackmarket3-non-AES.rsa -passin pass:mypass
replace mypass with your password

.blackmarket3-non-AES.rsa contains your private key, copy pasta to the textbox and enter your userid, and hit login.

Your private key is not at any time sent to the server.

Register
The secure way to register is to generate your own public-private RSA keypair using openssl(if it's installed on your system), and then copy/paste them in before hitting register.

See here for more info on how to do that, but forget the -des3 part from that.

The unsecure method is to have our server do this for you and fill in the fields automatically by pressing the Generate new keypair.

It's handy but remember, all that information is sent in plain text over the internet so anyone listening (ECHELON) will have a copy. You're choice.

And don't lose that information, keep your private key safely stored, and don't lose your user id.

You can start trading with the client right now.

Start here

Oh by the way, private key formating is important.
Code:
-----END RSA PRIVATE KEY-----
Should be on a newline.

p.s. please don't melt my server, be understanding, sometimes the client is a little slow(often the server is slow).

Nefario




Pages:
Jump to: