summaryrefslogtreecommitdiffstats
path: root/tests/sign.sh
blob: c0b46a1a401b150b37c4d97c151811377785f172 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
#!/bin/sh
#
# Copyright (C) 2019  Patrick McDermott
#
# This file is part of the ProteanOS Archive Manager.
#
# The ProteanOS Archive Manager is free software: you can redistribute
# it and/or modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation, either version 3 of the
# License, or (at your option) any later version.
#
# The ProteanOS Archive Manager is distributed in the hope that it
# will be useful, but WITHOUT ANY WARRANTY; without even the implied
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
# See the GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with the ProteanOS Archive Manager.  If not, see
# <http://www.gnu.org/licenses/>.

. ${0%/*}/aux/init.sh
. tap-functions.sh
. opk.sh

plan_ 12

if ${EMBEDDED_USIGN}; then
	usign="${abs_top_builddir}/3rdparty/usign/usign"
else
	usign="${USIGN}"
fi

mkdir 'archive/'
cat >'archive/conf' <<-EOF
	conf_gzip=true
	conf_key=key
	EOF

command_ok_ 'key generation' -- \
	"${usign}" -G -c 'archive signing key' \
	-p 'archive/key.pub' -s 'archive/key'

changes="$(make_opks_and_changes 'foo' 'foo bar' '1.0-1' 'arch' 'plat' 'trunk' \
	'base')"

command_ok_ 'pro-archman include' -- \
	"${PRO_ARCHMAN}" -v -b 'archive/' include "${changes}"

command_ok_ 'verification' -- \
	"${usign}" -V -m 'archive/feeds/dev/trunk/arch/plat/base/Packages' \
	-p 'archive/key.pub' \
	-x 'archive/feeds/dev/trunk/arch/plat/base/Packages.sig'

command_ok_ 'verification of wrong file' -- not \
	"${usign}" -V -m 'archive/feeds/dev/trunk/arch/plat/base/Packages.gz' \
	-p 'archive/key.pub' \
	-x 'archive/feeds/dev/trunk/arch/plat/base/Packages.sig'

mv 'archive/key.pub' 'archive/key.pub.old'
command_ok_ 'key generation' -- \
	"${usign}" -G -c 'archive signing key' \
	-p 'archive/key.pub' -s 'archive/key'

command_ok_ 'verification with wrong key' -- not \
	"${usign}" -V -m 'archive/feeds/dev/trunk/arch/plat/base/Packages' \
	-p 'archive/key.pub' \
	-x 'archive/feeds/dev/trunk/arch/plat/base/Packages.sig'

command_ok_ 'verification with wrong key' -- not \
	"${usign}" -V -m 'archive/feeds/dev/trunk/arch/plat/base/Packages.gz' \
	-p 'archive/key.pub' \
	-x 'archive/feeds/dev/trunk/arch/plat/base/Packages.sig'

command_ok_ 'pro-archman sign' -- \
	"${PRO_ARCHMAN}" -v -b 'archive/' sign

command_ok_ 'verification' -- \
	"${usign}" -V -m 'archive/feeds/dev/trunk/arch/plat/base/Packages' \
	-p 'archive/key.pub' \
	-x 'archive/feeds/dev/trunk/arch/plat/base/Packages.sig'

command_ok_ 'verification of wrong file' -- not \
	"${usign}" -V -m 'archive/feeds/dev/trunk/arch/plat/base/Packages.gz' \
	-p 'archive/key.pub' \
	-x 'archive/feeds/dev/trunk/arch/plat/base/Packages.sig'

command_ok_ 'verification with wrong key' -- not \
	"${usign}" -V -m 'archive/feeds/dev/trunk/arch/plat/base/Packages' \
	-p 'archive/key.pub.old' \
	-x 'archive/feeds/dev/trunk/arch/plat/base/Packages.sig'

command_ok_ 'verification with wrong key' -- not \
	"${usign}" -V -m 'archive/feeds/dev/trunk/arch/plat/base/Packages.gz' \
	-p 'archive/key.pub.old' \
	-x 'archive/feeds/dev/trunk/arch/plat/base/Packages.sig'

: