Using latest main:
cargo run -- deploy --contract-name registry-tansu-manager --wasm-name unverified/registry-tansu-manager --source-account theahaco -- --project-key 7b5c4d66469990e3a33ad17af41a49cca33a930e2d63e67f3c3331923294e39e --tansu CBXKUSLQPVF35FYURR5C42BPYA5UOVDXX2ELKIM2CAJMCI6HXG2BHGZA --registry CAAXJETKPYAATU4HVVQUTE2FFBULNFGZNEOC3MS635U5K3GZLAY2HI4M
Compiling stellar-registry-cli v0.0.21 (/Users/chadoh/code/rgstry/cli/crates/stellar-registry-cli)
Finished `dev` profile [unoptimized + debuginfo] target(s) in 4.17s
Running `target/debug/stellar-registry deploy --contract-name registry-tansu-manager --wasm-name unverified/registry-tansu-manager --source-account theahaco -- --project-key 7b5c4d66469990e3a33ad17af41a49cca33a930e2d63e67f3c3331923294e39e --tansu CBXKUSLQPVF35FYURR5C42BPYA5UOVDXX2ELKIM2CAJMCI6HXG2BHGZA --registry CAAXJETKPYAATU4HVVQUTE2FFBULNFGZNEOC3MS635U5K3GZLAY2HI4M`
error: Secure Store does not reveal secret key
You can see this "Secure Store does not reveal secret key" at the end.
This happens because --admin for the contract is set to the signer, which is theahaco, which is stored in my macOS Secure Store.
Quick stack trace of relevant lines:
This should be included in the fix for signer plugins (we need to verify that this PR considers this situation):
Using latest
main:You can see this "Secure Store does not reveal secret key" at the end.
This happens because
--adminfor the contract is set to the signer, which istheahaco, which is stored in my macOS Secure Store.Quick stack trace of relevant lines:
deploylogic in stellar-registry-cli callsfind_args_and_signersfind_args_and_signerscallsstellar_cli::commands::contract::arg_parsing::build_constructor_parametersstellar-clisource, follow the logic through, andbuild_constructor_argseventually callsconfig.locator.get_secret_key. This is the problem!!! It is trying to get the secret key of theadminparam, which is stored in secure store and is, thankfully, not available in plain text. The (very old)get_secret_keylogic assumed that all keys were stored as plain text on the filesystem.This should be included in the fix for signer plugins (we need to verify that this PR considers this situation):