Skip to content
Merged
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 7 additions & 4 deletions docs/Concepts/Permissioning/Onchain-Permissioning.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,10 +24,6 @@ Node Rules and Account Rules contracts. The Ingress contracts are deployed to st
* Admin - stores the list of admin accounts and admin list operations (for example, add and remove). There is
one list of admin accounts for node and accounts.

!!! note
The permissioning smart contracts are currently in the process of going through a third party audit.
Please [contact us](https://pegasys.tech/contact/) before using in a production environment.

## Permissioning Management Dapp

The [Permissioning Management Dapp](../../Tutorials/Permissioning/Getting-Started-Onchain-Permissioning.md) is provided to view
Expand All @@ -47,6 +43,13 @@ Permissioning implements three whitelists:

* Admins are accounts that can update the accounts and nodes whitelists

!!! caution "Using account permissioning and privacy"
Account permissioning cannot be used with [random key signing](../../HowTo/Use-Privacy/Sign-Privacy-Marker-Transactions.md)
for [privacy marker transactions](../Privacy/Private-Transaction-Processing.md).

If using account permissioning and privacy, a signing key must be specified using the [`--privacy-marker-transaction-signing-key-file`](../../Reference/CLI/CLI-Syntax.md#privacy-marker-transaction-signing-key-file)
command line option and the signing key included in the accounts whitelist.

## Bootnodes

When a node is added to the network, it connects to the bootnodes until it synchronizes to the chain head regardless of
Expand Down
7 changes: 7 additions & 0 deletions docs/HowTo/Limit-Access/Local-Permissioning.md
Original file line number Diff line number Diff line change
Expand Up @@ -76,6 +76,13 @@ A node with account permissioning accepts transactions only from accounts in the

Account whitelisting is at the node level. That is, each node in the network has a [permisssions configuration file](#permissions-configuration-file)
in the [data directory](../../Reference/CLI/CLI-Syntax.md#data-path) for the node.

!!! caution "Using account permissioning and privacy"
Account permissioning cannot be used with [random key signing](../Use-Privacy/Sign-Privacy-Marker-Transactions.md)
for [privacy marker transactions](../../Concepts/Privacy/Private-Transaction-Processing.md).

If using account permissioning and privacy, a signing key must be specified using the [`--privacy-marker-transaction-signing-key-file`](../../Reference/CLI/CLI-Syntax.md#privacy-marker-transaction-signing-key-file)
command line option and the signing key included in the accounts whitelist.

Transactions are validated against the accounts whitelist at the following points:

Expand Down
13 changes: 10 additions & 3 deletions docs/HowTo/Use-Privacy/Sign-Privacy-Marker-Transactions.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,17 @@ description: How to sign a Privacy Marker Transaction with Hyperledger Besu

Privacy Marker Transactions are signed with a random or specified key. To sign Privacy Marker Transactions with a specified private key, use [`--privacy-marker-transaction-signing-key-file`](../../Reference/CLI/CLI-Syntax.md#privacy-marker-transaction-signing-key-file) when starting Hyperledger Besu.

!!! important
You must specify a key in networks where gas is paid, and the associated account must contain adequate funds.
You must specify a key in networks where gas is paid, and the associated account must contain adequate funds.

In [free gas networks](../../HowTo/Configure/FreeGas.md), exclude the `--privacy-marker-transaction-signing-key-file` command line option to sign each Privacy Marker Transaction with a different random key to add additional anonymity.

!!! caution "Using account permissioning and privacy"
[Account permissioning](../../Concepts/Permissioning/Permissioning-Overview.md#account-permissioning)
cannot be used with random key signing.

If using account permissioning and privacy, a signing key must be specified using the [`--privacy-marker-transaction-signing-key-file`](../../Reference/CLI/CLI-Syntax.md#privacy-marker-transaction-signing-key-file)
command line option and the signing key included in the accounts whitelist.

!!! note
During the [private transaction process](../../Concepts/Privacy/Private-Transaction-Processing.md), Privacy Marker Transactions are signed in Hyperledger Besu.
During the [private transaction process](../../Concepts/Privacy/Private-Transaction-Processing.md), Privacy Marker Transactions are signed in Hyperledger Besu.

3 changes: 3 additions & 0 deletions docs/Reference/CLI/CLI-Syntax.md
Original file line number Diff line number Diff line change
Expand Up @@ -984,6 +984,9 @@ privacy-marker-transaction-signing-key-file="/home/me/me_node/myPrivateKey"

`<FILE>` is the name of the private key file used to [sign Privacy Marker Transactions](../../HowTo/Use-Privacy/Sign-Privacy-Marker-Transactions.md). If this option isn't specified, each transaction is signed with a different randomly generated key.

If using [account permissioning](../../Concepts/Permissioning/Permissioning-Overview.md#account-permissioning)
and privacy, a private key file must be specified and the signing key included in the accounts whitelist.

### privacy-precompiled-address

```bash tab="Syntax"
Expand Down