Post-Mortem on issue — October 28th, 2023 * * * How it

Question

Sentinel dVPN - Contributor Public Group

Post-Mortem on issue — October 28th, 2023 * * * How it

works?

As you know Bagimsiz VPN is based on top of the same SDK (framework), that was developed for Based VPN by SOLAR Labs. The idea of lightweight solution is to provide 3rd-parties with simple yet powerful server-based solution, which will interact with the chain for the mobile app. This server-based solution is operating with different wallets, each of these is authorized to perform certain actions. One — manages whole plan, second one — enrolls customers' wallets to so-called "main" plan-based subscription, other — manages node presense in the plan and so on. All of these "management" wallets are executing transactions on behalf of main corporate wallet, using authz authorization (basically like power of attorney on blockchain). These authz authorizations should be granted in advance manually and our software expects it to be set correctly.

* * *

What happened?

One of our wallet authorization were misconfigured for the wallet, responsible for subscription renewal. It wasn't granted authorization properly. As old plan-based subscription did expire, our software wasn't able to re-subscribe to the plan, causing users to have issues with the app:

1. Something like active session does not exist for our existing users — since we were trying to create credentials for expired subscription.

2. And something like wallet sent1pj4...7t is not yet enrolled — for new users, as we had no active subscription to enroll them to.

Glad to tell, we fixed all of it.

* * *

What we did?

We have fixed authorization for that wallet and now main plan-based subscription has been renewed. As subscription ID was changed to a newer one, it takes some time to get all customers re-enrolled to it. It will take about 2-3 minutes from now. This problem shouldn't happen again, as it was basic misconfiguration issue caused by human factor.