| | 1 | #!/bin/sh |
| | 2 | set -e |
| | 3 | |
| | 4 | TESTDIR=$(readlink -f $(dirname $0)) |
| | 5 | . $TESTDIR/framework |
| | 6 | |
| | 7 | setupenvironment |
| | 8 | configarchitecture 'amd64' |
| | 9 | |
| | 10 | # start from a clean plate again |
| | 11 | cleanplate() { |
| | 12 | rm -rf rootdir/etc/apt/trusted.gpg.d/ rootdir/etc/apt/trusted.gpg |
| | 13 | mkdir rootdir/etc/apt/trusted.gpg.d/ |
| | 14 | } |
| | 15 | |
| | 16 | createlistofkeys() { |
| | 17 | while [ -n "$1" ]; do |
| | 18 | # gpg 2.1 has a slightly different output format |
| | 19 | if grep -q ' rsa2048/' aptkey.list; then |
| | 20 | case "$1" in |
| | 21 | *Joe*|*Sixpack*) echo 'pub rsa2048/DBAC8DAE 2010-08-18';; |
| | 22 | *Rex*|*Expired*) echo 'pub rsa2048/27CE74F9 2013-07-12 [expired: 2013-07-13]';; |
| | 23 | *Marvin*|*Paranoid*) echo 'pub rsa2048/528144E2 2011-01-16';; |
| | 24 | *) echo 'UNKNOWN KEY';; |
| | 25 | esac |
| | 26 | else |
| | 27 | case "$1" in |
| | 28 | *Joe*|*Sixpack*) echo 'pub 2048R/DBAC8DAE 2010-08-18';; |
| | 29 | *Rex*|*Expired*) echo 'pub 2048R/27CE74F9 2013-07-12 [expired: 2013-07-13]';; |
| | 30 | *Marvin*|*Paranoid*) echo 'pub 2048R/528144E2 2011-01-16';; |
| | 31 | *) echo 'UNKNOWN KEY';; |
| | 32 | esac |
| | 33 | fi |
| | 34 | shift |
| | 35 | done |
| | 36 | } |
| | 37 | |
| | 38 | testaptkeys() { |
| | 39 | if ! aptkey list | grep '^pub' > aptkey.list; then |
| | 40 | echo -n > aptkey.list |
| | 41 | fi |
| | 42 | testfileequal './aptkey.list' "$(createlistofkeys "$@")" |
| | 43 | } |
| | 44 | |
| | 45 | echo 'APT::Key::ArchiveKeyring "./keys/joesixpack.pub"; |
| | 46 | APT::Key::RemovedKeys "./keys/rexexpired.pub";' > rootdir/etc/apt/apt.conf.d/aptkey.conf |
| | 47 | |
| | 48 | testrun() { |
| | 49 | cleanplate |
| | 50 | ln -sf "${TMPWORKINGDIRECTORY}/keys/joesixpack.pub" rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 51 | |
| | 52 | msgtest 'Check that paths in list output are not' 'double-slashed' |
| | 53 | aptkey list 2>&1 | grep -q '//' && msgfail || msgpass |
| | 54 | |
| | 55 | msgtest 'Check that paths in finger output are not' 'double-slashed' |
| | 56 | aptkey finger 2>&1 | grep -q '//' && msgfail || msgpass |
| | 57 | testaptkeys 'Joe Sixpack' |
| | 58 | |
| | 59 | testsuccessequal 'gpg: key DBAC8DAE: "Joe Sixpack (APT Testcases Dummy) <joe@example.org>" not changed |
| | 60 | gpg: Total number processed: 1 |
| | 61 | gpg: unchanged: 1' aptkey --fakeroot update |
| | 62 | |
| | 63 | testaptkeys 'Joe Sixpack' |
| | 64 | testfailure test -e rootdir/etc/apt/trusted.gpg |
| | 65 | |
| | 66 | testsuccess aptkey --fakeroot add ./keys/rexexpired.pub |
| | 67 | msgtest 'Check if trusted.gpg is created with permissions set to' '0644' |
| | 68 | if [ "$(stat -c '%a' rootdir/etc/apt/trusted.gpg )" = '644' ]; then |
| | 69 | msgpass |
| | 70 | else |
| | 71 | msgfail |
| | 72 | fi |
| | 73 | |
| | 74 | testaptkeys 'Rex Expired' 'Joe Sixpack' |
| | 75 | |
| | 76 | msgtest 'Check that Sixpack key can be' 'exported' |
| | 77 | aptkey export 'Sixpack' > aptkey.export |
| | 78 | aptkey --keyring rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg exportall > aptkey.exportall |
| | 79 | testsuccess --nomsg cmp aptkey.export aptkey.exportall |
| | 80 | testsuccess test -s aptkey.export |
| | 81 | testsuccess test -s aptkey.exportall |
| | 82 | |
| | 83 | msgtest 'Execute update again to trigger removal of' 'Rex Expired key' |
| | 84 | testsuccess --nomsg aptkey --fakeroot update |
| | 85 | |
| | 86 | testaptkeys 'Joe Sixpack' |
| | 87 | |
| | 88 | msgtest "Try to remove a key which exists, but isn't in the" 'forced keyring' |
| | 89 | testsuccess --nomsg aptkey --fakeroot --keyring rootdir/etc/apt/trusted.gpg del DBAC8DAE |
| | 90 | |
| | 91 | testaptkeys 'Joe Sixpack' |
| | 92 | |
| | 93 | testsuccess aptkey --fakeroot del DBAC8DAE |
| | 94 | testempty aptkey list |
| | 95 | |
| | 96 | msgtest 'Test key removal with' 'lowercase key ID' #keylength somewhere between 8byte and short |
| | 97 | cleanplate |
| | 98 | cp -a keys/joesixpack.pub rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 99 | testsuccess --nomsg aptkey --fakeroot del d141dbac8dae |
| | 100 | testempty aptkey list |
| | 101 | |
| | 102 | msgtest 'Test key removal with' 'single key in real file' |
| | 103 | cleanplate |
| | 104 | cp -a keys/joesixpack.pub rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 105 | testsuccess --nomsg aptkey --fakeroot del DBAC8DAE |
| | 106 | testempty aptkey list |
| | 107 | testfailure test -e rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 108 | testsuccess cmp keys/joesixpack.pub rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg~ |
| | 109 | |
| | 110 | msgtest 'Test key removal with' 'long key ID' |
| | 111 | cleanplate |
| | 112 | cp -a keys/joesixpack.pub rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 113 | testsuccess --nomsg aptkey --fakeroot del 5A90D141DBAC8DAE |
| | 114 | testempty aptkey list |
| | 115 | testfailure test -e rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 116 | testsuccess cmp keys/joesixpack.pub rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg~ |
| | 117 | |
| | 118 | msgtest 'Test key removal with' 'fingerprint' |
| | 119 | cleanplate |
| | 120 | cp -a keys/joesixpack.pub rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 121 | testsuccess --nomsg aptkey --fakeroot del 34A8E9D18DB320F367E8EAA05A90D141DBAC8DAE |
| | 122 | testempty aptkey list |
| | 123 | testfailure test -e rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 124 | testsuccess cmp keys/joesixpack.pub rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg~ |
| | 125 | |
| | 126 | msgtest 'Test key removal with' 'single key in softlink' |
| | 127 | cleanplate |
| | 128 | ln -s "$(readlink -f ./keys/joesixpack.pub)" rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 129 | testsuccess --nomsg aptkey --fakeroot del DBAC8DAE |
| | 130 | testempty aptkey list |
| | 131 | testfailure test -e rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 132 | testsuccess test -L rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg~ |
| | 133 | |
| | 134 | cleanplate |
| | 135 | testsuccess aptkey --fakeroot add ./keys/joesixpack.pub |
| | 136 | ln -sf "$(readlink -f ./keys/marvinparanoid.pub)" "./keys/marvin paránöid.pub" |
| | 137 | testsuccess aptkey --fakeroot add "./keys/marvin paránöid.pub" |
| | 138 | testaptkeys 'Joe Sixpack' 'Marvin Paranoid' |
| | 139 | cp -a rootdir/etc/apt/trusted.gpg keys/testcase-multikey.pub # store for reuse |
| | 140 | |
| | 141 | msgtest 'Test key removal with' 'multi key in real file' |
| | 142 | cleanplate |
| | 143 | cp -a keys/testcase-multikey.pub rootdir/etc/apt/trusted.gpg.d/multikey.gpg |
| | 144 | testsuccess --nomsg aptkey --fakeroot del DBAC8DAE |
| | 145 | testaptkeys 'Marvin Paranoid' |
| | 146 | testsuccess cmp keys/testcase-multikey.pub rootdir/etc/apt/trusted.gpg.d/multikey.gpg~ |
| | 147 | |
| | 148 | msgtest 'Test key removal with' 'multi key in softlink' |
| | 149 | cleanplate |
| | 150 | ln -s "$(readlink -f ./keys/testcase-multikey.pub)" rootdir/etc/apt/trusted.gpg.d/multikey.gpg |
| | 151 | testsuccess --nomsg aptkey --fakeroot del DBAC8DAE |
| | 152 | testaptkeys 'Marvin Paranoid' |
| | 153 | testsuccess cmp keys/testcase-multikey.pub rootdir/etc/apt/trusted.gpg.d/multikey.gpg~ |
| | 154 | testfailure test -L rootdir/etc/apt/trusted.gpg.d/multikey.gpg |
| | 155 | testsuccess test -L rootdir/etc/apt/trusted.gpg.d/multikey.gpg~ |
| | 156 | |
| | 157 | msgtest 'Test key removal with' 'multiple files including key' |
| | 158 | cleanplate |
| | 159 | cp -a keys/joesixpack.pub rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 160 | cp -a keys/testcase-multikey.pub rootdir/etc/apt/trusted.gpg.d/multikey.gpg |
| | 161 | testsuccess --nomsg aptkey --fakeroot del DBAC8DAE |
| | 162 | testaptkeys 'Marvin Paranoid' |
| | 163 | testfailure test -e rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 164 | testsuccess cmp keys/joesixpack.pub rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg~ |
| | 165 | testsuccess cmp keys/testcase-multikey.pub rootdir/etc/apt/trusted.gpg.d/multikey.gpg~ |
| | 166 | |
| | 167 | cleanplate |
| | 168 | cp -a keys/joesixpack.pub rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 169 | cp -a keys/testcase-multikey.pub rootdir/etc/apt/trusted.gpg.d/multikey.gpg |
| | 170 | testaptkeys 'Joe Sixpack' 'Joe Sixpack' 'Marvin Paranoid' |
| | 171 | msgtest 'Test merge-back of' 'added keys' |
| | 172 | testsuccess --nomsg aptkey adv --batch --yes --import keys/rexexpired.pub |
| | 173 | testaptkeys 'Rex Expired' 'Joe Sixpack' 'Joe Sixpack' 'Marvin Paranoid' |
| | 174 | |
| | 175 | msgtest 'Test merge-back of' 'removed keys' |
| | 176 | testsuccess --nomsg aptkey adv --batch --yes --delete-keys 27CE74F9 |
| | 177 | testaptkeys 'Joe Sixpack' 'Joe Sixpack' 'Marvin Paranoid' |
| | 178 | |
| | 179 | msgtest 'Test merge-back of' 'removed duplicate keys' |
| | 180 | testsuccess --nomsg aptkey adv --batch --yes --delete-keys DBAC8DAE |
| | 181 | testaptkeys 'Marvin Paranoid' |
| | 182 | |
| | 183 | cleanplate |
| | 184 | cp -a keys/joesixpack.pub rootdir/etc/apt/trusted.gpg.d/joesixpack.gpg |
| | 185 | cp -a keys/testcase-multikey.pub rootdir/etc/apt/trusted.gpg.d/multikey.gpg |
| | 186 | msgtest 'Test signing a file' 'with a key' |
| | 187 | echo 'Verify me. This is my signature.' > signature |
| | 188 | testsuccess --nomsg aptkey --quiet --keyring keys/marvinparanoid.pub --secret-keyring keys/marvinparanoid.sec --readonly \ |
| | 189 | adv --batch --yes --default-key 'Marvin' --armor --detach-sign --sign --output signature.gpg signature |
| | 190 | |
| | 191 | |
| | 192 | for GPGV in '' 'gpgv' 'gpgv2'; do |
| | 193 | echo "APT::Key::GPGVCommand \"$GPGV\";" > rootdir/etc/apt/apt.conf.d/00gpgvcmd |
| | 194 | |
| | 195 | msgtest 'Test verify a file' 'with all keys' |
| | 196 | testsuccess --nomsg aptkey --quiet --readonly verify signature.gpg signature |
| | 197 | |
| | 198 | msgtest 'Test verify a file' 'with good keyring' |
| | 199 | testsuccess --nomsg aptkey --quiet --readonly --keyring keys/testcase-multikey.pub verify signature.gpg signature |
| | 200 | |
| | 201 | msgtest 'Test fail verify a file' 'with bad keyring' |
| | 202 | testfailure --nomsg aptkey --quiet --readonly --keyring keys/joesixpack.pub verify signature.gpg signature |
| | 203 | |
| | 204 | msgtest 'Test fail verify a file' 'with non-existing keyring' |
| | 205 | testfailure --nomsg aptkey --quiet --readonly --keyring keys/does-not-exist.pub verify signature.gpg signature |
| | 206 | testfailure test -e keys/does-not-exist.pub |
| | 207 | |
| | 208 | # note: this isn't how apts gpgv method implements keyid for verify |
| | 209 | msgtest 'Test verify a file' 'with good keyid' |
| | 210 | testsuccess --nomsg aptkey --quiet --readonly --keyid 'Paranoid' verify signature.gpg signature |
| | 211 | |
| | 212 | msgtest 'Test fail verify a file' 'with bad keyid' |
| | 213 | testfailure --nomsg aptkey --quiet --readonly --keyid 'Sixpack' verify signature.gpg signature |
| | 214 | |
| | 215 | msgtest 'Test fail verify a file' 'with non-existing keyid' |
| | 216 | testfailure --nomsg aptkey --quiet --readonly --keyid 'Kalnischkies' verify signature.gpg signature |
| | 217 | |
| | 218 | msgtest 'Test verify fails on' 'bad file' |
| | 219 | echo 'lalalalala' > signature2 |
| | 220 | testfailure --nomsg aptkey --quiet --readonly verify signature.gpg signature2 |
| | 221 | done |
| | 222 | } |
| | 223 | |
| | 224 | setupgpgcommand() { |
| | 225 | echo "APT::Key::GPGCommand \"$1\";" > rootdir/etc/apt/apt.conf.d/00gpgcmd |
| | 226 | msgmsg 'Force tests to be run with' "$1" |
| | 227 | testsuccess aptkey --readonly adv --version |
| | 228 | cp rootdir/tmp/testsuccess.output aptkey.version |
| | 229 | testsuccess grep "^gpg (GnuPG) $2\." aptkey.version |
| | 230 | } |
| | 231 | |
| | 232 | # run with default (whatever this is) |
| | 233 | testrun |
| | 234 | # run with … |
| | 235 | setupgpgcommand 'gpg' '1' |
| | 236 | testrun |
| | 237 | setupgpgcommand 'gpg2' '2' |
| | 238 | testrun |
projects / apt.git / blame_incremental