Adding second owner to a pool using Adalite

MAD_TURK · 21 May 2021 06:14

Hello everyone,
I am in the process of adding a second owner to my pool. He is using a Ledger HW wallet.
We started in this order,
Th second owner download his stake.vkey and send it to me.
I have created the pool.cert using my key plus his key
I created a transaction as tx.raw with 2 witnesses
I signed as the first owner and created tx.signed
I send it to the second owner.
He used Adalite.io checked every parameter and signed than click download. Adalite produced witness.json file.
He send back to me and now I am confused.

I need to submit tx.signed using witness.json but I can not figure it out.

I have checked vacuumlabs explanation, link below, They explain that I need to assemble transaction using witness.json but how?

github.com

vacuumlabs/cardano-hw-cli/blob/develop/docs/poolRegistration.md#create-transaction-witnesses

# Pool registration demo

This guide will walk you through registering a stake pool with a hardware wallet. Make sure you are well aware of [staking in Cardano](https://cardano.org/stake-pool-delegation) and [stake pool operations](https://docs.cardano.org/en/latest/getting-started/stake-pool-operators/index.html). Thorough documentation of how to register a staking pool in steps without a hardware wallet can be found [here](https://docs.cardano.org/projects/cardano-node/en/latest/stake-pool-operations/node_keys.html). It contains all the details, implications and explanations. We will reference it in further steps and give general overview of what is going on in each major step.

## Stake pool registration limitations

### As an owner

HW wallet supports signing of stake pool registration certificates when providing pool owner signatures. In the general case, the transaction may contain external inputs (e.g. belonging to the pool operator) and HW wallet is not able to verify whether they are actually external or not, so if we allowed signing the transaction with a spending key, there is the risk of losing funds from an input that the user did not intend to spend from. Moreover there is the risk of inadvertedly signing a withdrawal in the transaction if there's any. To mitigate those risks, HW wallet has special validation rules for stake pool registration transactions. The validation rules are the following:

1. The transaction must not contain any other certificates, not even another stake pool registration
2. The transaction must not contain any withdrawals
3. Exactly one owner should be passed as a staking path and the rest of owners should be passed as bech32-encoded reward addresses

### As an operator

Currently only Ledger supports signing and creating payment/pool witnesses.

## Create pool keys

This file has been truncated. show original

After the first attempt I thought maybe I should send the tx.raw file directly to the second owner expecting after he sing first, it will create tx.signed file but instead, he download witness.json again.

As far as I understand, I need to assemble a transaction instead of signing one.
The image below from a comment on the Adalite.io site for a different question but explaining what should I do, I guess…

If someone put some light on this, it would be great.

Vadimus · 21 May 2021 07:14

cardano-cli transaction assemble
–tx-body-file tx.raw
–witness-file node-cold.witness
–witness-file stake.witness
–witness-file payment.witness
–witness-file trezor_stake.witness
–out-file tx.multisign

cardano-cli transaction submit
–tx-file tx.multisign
–mainnet

Vadimus · 21 May 2021 07:46

MAD_TURK · 21 May 2021 10:05

Thanks @Vadimus but this solution requires the second owner restore his wallet into preferably air-gap PC in order to export skate2.hwsfile plus using Cardano-cli to create witness file.

I am trying to understand how Adalite.io doing without restoring the wallet to anywhere. As the second owner not much a techie person, your solution create different challenge for us.

Thanks again for your help.

Vadimus · 21 May 2021 12:14

hwsfile file is needed if you use cardano-hw-cli on PC, adalite reproduces cardano-hw-cli functions via web

Vadimus · 21 May 2021 12:17

cardano-cli transaction build-raw \
    ${tx_in} \
    --tx-out $(cat payment.addr)+${txOut} \
    --ttl $(( ${currentSlot} + 10000)) \
    --fee ${fee} \
    --certificate-file pool.cert \
    --out-file tx.raw


cardano-cli transaction witness \
  --tx-body-file tx.raw \
  --signing-key-file node.skey \
  --mainnet \
  --out-file node-cold.witness

cardano-cli transaction witness \
  --tx-body-file tx.raw \
  --signing-key-file stake.skey \
  --mainnet \
  --out-file stake.witness

cardano-cli transaction witness \
  --tx-body-file tx.raw \
  --signing-key-file payment.skey \
  --mainnet \
  --out-file payment.witness


cardano-hw-cli transaction witness \
  --tx-body-file tx.raw \
  --hw-signing-file trezor_stake.hwsfile \
  --mainnet \
  --out-file trezor_stake.witness


cardano-cli transaction assemble \
  --tx-body-file tx.raw \
  --witness-file node-cold.witness \
  --witness-file stake.witness \
  --witness-file payment.witness \
  --witness-file trezor_stake.witness \
  --out-file tx.multisign


cardano-cli transaction submit \
    --tx-file tx.multisign \
    --mainnet

In this script, you replace the part with cardano-hw-cli using adalite

MAD_TURK · 23 May 2021 02:43

Thanks @Vadimus for your help.
Although I just wanted to use adalite solution, I had to use your solution instead.

For future reference, I had to use an air-gaped node to create the hw.witness fie.

Thanks