1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
|
package signature
import (
"os"
"testing"
"time"
"github.com/stretchr/testify/require"
)
var commit = []byte(`
tree 86ec18bfe87ad42a782fdabd8310f9b7ac750f51
parent b83d6e391c22777fca1ed3012fce84f633d7fed0
parent 4a24d82dbca5c11c61556f3b35ca472b7463187e
author User <user@email> 1491906794 +0000
committer User <user@email> 1491906794 +0000
Update README.md to include
`)
func TestParseSigningKeys(t *testing.T) {
primaryPath := "testdata/signing_key.ssh"
secondaryPaths := []string{"testdata/signing_key.gpg"}
expectedSSHSignature, err := os.ReadFile("testdata/signing_key.ssh.sig")
require.NoError(t, err)
expectedGPGSignature, err := os.ReadFile("testdata/signing_key.gpg.sig")
require.NoError(t, err)
signingKeys, err := ParseSigningKeys(primaryPath, secondaryPaths...)
require.NoError(t, err)
require.NotNil(t, signingKeys.primaryKey)
require.Len(t, signingKeys.secondaryKeys, 1)
signature, err := signingKeys.CreateSignature(commit, time.Now())
require.NoError(t, err)
require.Equal(t, expectedSSHSignature, signature)
require.NoError(t, signingKeys.Verify(expectedSSHSignature, commit))
require.NoError(t, signingKeys.Verify(expectedGPGSignature, commit))
}
func TestGPGSignatureDeterministic(t *testing.T) {
primaryPath := "testdata/signing_key.gpg"
signingKeys, err := ParseSigningKeys(primaryPath)
require.NoError(t, err)
require.NotNil(t, signingKeys.primaryKey)
expectedGPGSignature, err := os.ReadFile("testdata/signing_key.gpg.sig")
require.NoError(t, err)
signature, err := signingKeys.CreateSignature(commit, time.Unix(1691162414, 0))
require.NoError(t, err)
require.Equal(t, expectedGPGSignature, signature)
}
|
