Skip to content

Commit 4351ce2

Browse files
committed
revert secure-workflow.md to staging to avoid merge conflict with #1690
1 parent 4a2d6db commit 4351ce2

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

docs/get-started/infrastructure/cardano-cli/security/secure-workflow.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -116,7 +116,7 @@ Create a draft for the transaction and save it in `tx.draft`. Notes:
116116
- The values after `--tx-in` are taken from the output of `cardano-cli query utxo` that you saved in your scratch file.
117117

118118
``` sh
119-
cardano-cli latest transaction build-raw \
119+
cardano-cli conway transaction build-raw \
120120
--tx-in 4e3a6e7fdcb0d0efa17bf79c13aed2b4cb9baf37fb1aa2e39553d5bd720c5c99#4 \
121121
--tx-out $(cat payment2.addr)+0 \
122122
--tx-out $(cat payment.addr)+0 \
@@ -135,7 +135,7 @@ The generally simplest transaction needs one input (a valid UTXO from `payment.a
135135
Note that to calculate the fee you need to include the draft transaction:
136136

137137
``` sh
138-
cardano-cli latest transaction calculate-min-fee \
138+
cardano-cli conway transaction calculate-min-fee \
139139
--tx-body-file tx.draft \
140140
--tx-in-count 1 \
141141
--tx-out-count 2 \
@@ -163,7 +163,7 @@ expr 20000000 - 10000000 - 167965
163163
We write the transaction in a file; we will name it `tx.raw`:
164164

165165
``` sh
166-
cardano-cli latest transaction build-raw \
166+
cardano-cli conway transaction build-raw \
167167
--tx-in 4e3a6e7fdcb0d0efa17bf79c13aed2b4cb9baf37fb1aa2e39553d5bd720c5c99#4 \
168168
--tx-out $(cat payment2.addr)+10000000 \
169169
--tx-out $(cat payment.addr)+9832035 \
@@ -176,7 +176,7 @@ cardano-cli latest transaction build-raw \
176176
Sign the transaction with the signing key `payment.skey` and save the signed transaction in `tx.signed`:
177177

178178
``` sh
179-
cardano-cli latest transaction sign \
179+
cardano-cli conway transaction sign \
180180
--tx-body-file tx.raw \
181181
--signing-key-file payment.skey \
182182
--mainnet \
@@ -194,7 +194,7 @@ Reattach your transfer memory stick back to the Internet connected computer, the
194194
Log into your Cardano node (or prepare Daedalus if using its node) and execute:
195195

196196
``` sh
197-
cardano-cli latest transaction submit \
197+
cardano-cli conway transaction submit \
198198
--tx-file tx.signed \
199199
--mainnet
200200
```
@@ -203,20 +203,20 @@ Then check for a successful transaction by whatever means you prefer, e.g. a [Ca
203203

204204
## FAQ
205205

206-
### Why can't I use `cardano-cli latest transaction build`?
206+
### Why can't I use `cardano-cli conway transaction build`?
207207

208208
This is a convenient command to avoid the ["change" (return UTxO) calculation](#calculate-the-change-to-send-back-to-paymentaddr) which requires you to prepare a test transaction, estimate fees, and calculate a final value of the funds to be moved. Instead, `transaction build` sends back "change" to a designated address.
209209

210210
Some consider this so much easier to use that ***all*** transactions should be performed with this command, as discussed here:
211211

212-
- [Please use `cardano-cli latest transaction build` instead of `cardano-cli latest transaction build-raw`](https://forum.cardano.org/t/please-use-cardano-cli-transaction-build-instead-of-cardano-cli-transaction-build-raw/94919)
212+
- [Please use `cardano-cli conway transaction build` instead of `cardano-cli conway transaction build-raw`](https://forum.cardano.org/t/please-use-cardano-cli-transaction-build-instead-of-cardano-cli-transaction-build-raw/94919)
213213

214214
However, this discussion revealed the undocumented condition that `transaction build` can only be done on a **live** Cardano node. The community in general doesn't know the reasons for this (with some speculation in the thread above), so in the meantime:
215215

216216
- Using `transaction build` would require, in addition to accumulating the UTxO and balance information from your live Cardano node or network environment to build your transaction, that you also run the `build` command in the networked environment as well and save the unsigned transaction file on your transfer media.
217217
- This transaction file would then need to be copied from the live environment to the air gap environment, where it would be signed... but in a security paranoid environment the user could never be sure the transaction was not built or modified maliciously outside the air gap.
218218

219-
Therefore this guide suggests *only* assembling transaction *details* outside the air gap, to be applied to `cardano-cli latest transaction build-raw` inside the air gap, because there is not much more convenience overall in using `transaction build` while perhaps introducing some security risk.
219+
Therefore this guide suggests *only* assembling transaction *details* outside the air gap, to be applied to `cardano-cli conway transaction build-raw` inside the air gap, because there is not much more convenience overall in using `transaction build` while perhaps introducing some security risk.
220220

221221
## Other pending topics in secure workflow
222222

0 commit comments

Comments
 (0)