tests/rpmsigdig.at

   1 #    rpmsigdig.at: rpm signature and digest tests
   2
   3 AT_BANNER([RPM signatures and digests])
   4
   5 # ------------------------------
   6 # Test pre-built package verification
   7 AT_SETUP([rpmkeys -Kv <unsigned> 1])
   8 AT_KEYWORDS([rpmkeys digest])
   9 AT_CHECK([
  10 RPMDB_CLEAR
  11 RPMDB_INIT
  12 rm -rf "${TOPDIR}"
  13
  14 runroot rpmkeys -Kv /data/RPMS/hello-2.0-1.x86_64.rpm /data/RPMS/hello-1.0-1.i386.rpm
  15 ],
  16 [0],
  17 [/data/RPMS/hello-2.0-1.x86_64.rpm:
  18     Header SHA1 digest: OK
  19     Header SHA256 digest: OK
  20     Payload SHA256 digest: OK
  21     MD5 digest: OK
  22 /data/RPMS/hello-1.0-1.i386.rpm:
  23     Header SHA1 digest: OK
  24     MD5 digest: OK
  25 ],
  26 [])
  27 AT_CLEANUP
  28
  29 # ------------------------------
  30 # Test corrupted package verification (corrupted signature)
  31 AT_SETUP([rpmkeys -Kv <corrupted unsigned> 1])
  32 AT_KEYWORDS([rpmkeys digest])
  33 AT_CHECK([
  34 RPMDB_CLEAR
  35 RPMDB_INIT
  36 rm -rf "${TOPDIR}"
  37
  38 pkg="hello-2.0-1.x86_64.rpm"
  39 cp "${RPMTEST}"/data/RPMS/${pkg} "${RPMTEST}"/tmp/${pkg}
  40 # conv=notrunc bs=1 seek=261 count=6 2> /dev/null
  41 dd if=/dev/zero of="${RPMTEST}"/tmp/${pkg} \
  42    conv=notrunc bs=1 seek=333 count=4 2> /dev/null
  43 runroot rpmkeys -Kv /tmp/${pkg}
  44 ],
  45 [1],
  46 [/tmp/hello-2.0-1.x86_64.rpm:
  47     Header SHA1 digest: OK
  48     Header SHA256 digest: OK
  49     Payload SHA256 digest: OK
  50     MD5 digest: BAD (Expected 007ca1d8b35cca02a1854ba301c5432e != 137ca1d8b35cca02a1854ba301c5432e)
  51 ],
  52 [])
  53 AT_CLEANUP
  54 # ------------------------------
  55 # Test corrupted package verification (corrupted header)
  56 AT_SETUP([rpmkeys -Kv <corrupted unsigned> 2])
  57 AT_KEYWORDS([rpmkeys digest])
  58 AT_CHECK([
  59 RPMDB_CLEAR
  60 RPMDB_INIT
  61 rm -rf "${TOPDIR}"
  62
  63 pkg="hello-2.0-1.x86_64.rpm"
  64 cp "${RPMTEST}"/data/RPMS/${pkg} "${RPMTEST}"/tmp/${pkg}
  65 dd if=/dev/zero of="${RPMTEST}"/tmp/${pkg} \
  66    conv=notrunc bs=1 seek=5555 count=6 2> /dev/null
  67 runroot rpmkeys -Kv /tmp/${pkg}
  68 ],
  69 [1],
  70 [/tmp/hello-2.0-1.x86_64.rpm:
  71     Header SHA1 digest: BAD (Expected 5cd9874c510b67b44483f9e382a1649ef7743bac != 4261b2c1eb861a4152c2239bce20bfbcaa8971ba)
  72     Header SHA256 digest: BAD (Expected ef920781af3bf072ae9888eec3de1c589143101dff9cc0b561468d395fb766d9 != 29fdfe92782fb0470a9a164a6c94af87d3b138c63b39d4c30e0223ca1202ba82)
  73     Payload SHA256 digest: OK
  74     MD5 digest: BAD (Expected 137ca1d8b35cca02a1854ba301c5432e != de65519eeb4ab52eb076ec054d42e34e)
  75 ],
  76 [])
  77 AT_CLEANUP
  78
  79 # ------------------------------
  80 # Test corrupted package verification (corrupted payload)
  81 AT_SETUP([rpmkeys -Kv <corrupted unsigned> 3])
  82 AT_KEYWORDS([rpmkeys digest])
  83 AT_CHECK([
  84 RPMDB_CLEAR
  85 RPMDB_INIT
  86 rm -rf "${TOPDIR}"
  87
  88 pkg="hello-2.0-1.x86_64.rpm"
  89 cp "${RPMTEST}"/data/RPMS/${pkg} "${RPMTEST}"/tmp/${pkg}
  90 dd if=/dev/zero of="${RPMTEST}"/tmp/${pkg} \
  91    conv=notrunc bs=1 seek=7777 count=6 2> /dev/null
  92 runroot rpmkeys -Kv /tmp/${pkg}
  93 ],
  94 [1],
  95 [/tmp/hello-2.0-1.x86_64.rpm:
  96     Header SHA1 digest: OK
  97     Header SHA256 digest: OK
  98     Payload SHA256 digest: BAD (Expected 84a7338287bf19715c4eed0243f5cdb447eeb0ade37b2af718d4060aefca2f7c != bea903609dceac36e1f26a983c493c98064d320fdfeb423034ed63d649b2c8dc)
  99     MD5 digest: BAD (Expected 137ca1d8b35cca02a1854ba301c5432e != d662cd0d81601a7107312684ad1ddf38)
 100 ],
 101 [])
 102 AT_CLEANUP
 103
 104 # ------------------------------
 105 # Reproducably build and verify a package
 106 AT_SETUP([rpmkeys -Kv <unsigned> 2])
 107 AT_KEYWORDS([rpmkeys digest])
 108 AT_CHECK([
 109 RPMDB_CLEAR
 110 RPMDB_INIT
 111 rm -rf "${TOPDIR}"
 112
 113 runroot rpmbuild -bb --quiet \
 114         --define "%optflags -O2 -g" \
 115         --define "%_target_platform noarch-linux" \
 116         --define "%_binary_payload w.ufdio" \
 117         --define "%_buildhost localhost" \
 118         --define "%source_date_epoch_from_changelog 1" \
 119         --define "%clamp_mtime_to_source_date_epoch 1" \
 120         /data/SPECS/attrtest.spec
 121 runroot rpmkeys -Kv /build/RPMS/noarch/attrtest-1.0-1.noarch.rpm
 122 ],
 123 [0],
 124 [/build/RPMS/noarch/attrtest-1.0-1.noarch.rpm:
 125     Header SHA1 digest: OK
 126     Header SHA256 digest: OK
 127     Payload SHA256 digest: OK
 128     MD5 digest: OK
 129 ],
 130 [])
 131 AT_CLEANUP
 132
 133 # ------------------------------
 134 # Import a public RSA key
 135 AT_SETUP([rpmkeys --import rsa])
 136 AT_KEYWORDS([rpmkeys import])
 137 AT_CHECK([
 138 RPMDB_CLEAR
 139 RPMDB_INIT
 140 rm -rf "${TOPDIR}"
 141
 142 runroot rpmkeys --import /data/keys/rpm.org-rsa-2048-test.pub
 143 runroot rpm -qi gpg-pubkey-1964c5fc-58e63918|grep -v Date|grep -v Version:
 144 ],
 145 [0],
 146 [Name        : gpg-pubkey
 147 Version     : 1964c5fc
 148 Release     : 58e63918
 149 Architecture: (none)
 150 Group       : Public Keys
 151 Size        : 0
 152 License     : pubkey
 153 Signature   : (none)
 154 Source RPM  : (none)
 155 Build Host  : localhost
 156 Relocations : (not relocatable)
 157 Packager    : rpm.org RSA testkey <rsa@rpm.org>
 158 Summary     : gpg(rpm.org RSA testkey <rsa@rpm.org>)
 159 Description :
 160 -----BEGIN PGP PUBLIC KEY BLOCK-----
 161
 162 mQENBFjmORgBCAC7TMEk6wnjSs8Dr4yqSScWdU2pjcqrkTxuzdWvowcIUPZI0w/g
 163 HkRqGd4apjvY2V15kjL10gk3QhFP3pZ/9p7zh8o8NHX7aGdSGDK7NOq1eFaErPRY
 164 91LW9RiZ0lbOjXEzIL0KHxUiTQEmdXJT43DJMFPyW9fkCWg0OltiX618FUdWWfI8
 165 eySdLur1utnqBvdEbCUvWK2RX3vQZQdvEBODnNk2pxqTyV0w6VPQ96W++lF/5Aas
 166 7rUv3HIyIXxIggc8FRrnH+y9XvvHDonhTIlGnYZN4ubm9i4y3gOkrZlGTrEw7elQ
 167 1QeMyG2QQEbze8YjpTm4iLABCBrRfPRaQpwrABEBAAG0IXJwbS5vcmcgUlNBIHRl
 168 c3RrZXkgPHJzYUBycG0ub3JnPokBNwQTAQgAIQUCWOY5GAIbAwULCQgHAgYVCAkK
 169 CwIEFgIDAQIeAQIXgAAKCRBDRFkeGWTF/MxxCACnjqFL+MmPh9W9JQKT2DcLbBzf
 170 Cqo6wcEBoCOcwgRSk8dSikhARoteoa55JRJhuMyeKhhEAogE9HRmCPFdjezFTwgB
 171 BDVBpO2dZ023mLXDVCYX3S8pShOgCP6Tn4wqCnYeAdLcGg106N4xcmgtcssJE+Pr
 172 XzTZksbZsrTVEmL/Ym+R5w5jBfFnGk7Yw7ndwfQsfNXQb5AZynClFxnX546lcyZX
 173 fEx3/e6ezw57WNOUK6WT+8b+EGovPkbetK/rGxNXuWaP6X4A/QUm8O98nCuHYFQq
 174 +mvNdsCBqGf7mhaRGtpHk/JgCn5rFvArMDqLVrR9hX0LdCSsH7EGE+bR3r7wuQEN
 175 BFjmORgBCACk+vDZrIXQuFXEYToZVwb2attzbbJJCqD71vmZTLsW0QxuPKRgbcYY
 176 zp4K4lVBnHhFrF8MOUOxJ7kQWIJZMZFt+BDcptCYurbD2H4W2xvnWViiC+LzCMzz
 177 iMJT6165uefL4JHTDPxC2fFiM9yrc72LmylJNkM/vepT128J5Qv0gRUaQbHiQuS6
 178 Dm/+WRnUfx3i89SV4mnBxb/Ta93GVqoOciWwzWSnwEnWYAvOb95JL4U7c5J5f/+c
 179 KnQDHsW7sIiIdscsWzvgf6qs2Ra1Zrt7Fdk4+ZS2f/adagLhDO1C24sXf5XfMk5m
 180 L0OGwZSr9m5s17VXxfspgU5ugc8kBJfzABEBAAGJAR8EGAEIAAkFAljmORgCGwwA
 181 CgkQQ0RZHhlkxfzwDQf/Y5on5o+s/xD3tDyRYa6SErfT44lEArdCD7Yi+cygJFox
 182 3jyM8ovtJAkwRegwyxcaLN7zeG1p1Sk9ZAYWQEJT6qSU4Ppu+CVGHgxgnTcfUiu6
 183 EZZQE6srvua53IMY1lT50M7vx0T5VicHFRWBFV2C/Mc32p7cEE6nn45nEZgUXQNl
 184 ySEyvoRlsAJq6gFsfqucVz2vMJDTMVczUtq1CjvUqFbif8JVL36EoZCf1SeRw6d6
 185 s1Kp3AA33Rjd+Uw87HJ4EIB75zMFQX2H0ggAVdYTQcqGXHP5MZK1jJrHfxJyMi3d
 186 UNW2iqnN3BA7guhOv6OMiROF1+I7Q5nWT63mQC7IgQ==
 187 =Z6nu
 188 -----END PGP PUBLIC KEY BLOCK-----
 189
 190 ],
 191 [])
 192 AT_CLEANUP
 193
 194 AT_SETUP([rpmkeys --import invalid keys])
 195 AT_KEYWORDS([rpmkeys import])
 196 RPMDB_INIT
 197
 198 AT_CHECK([
 199 runroot rpmkeys --import /data/keys/CVE-2021-3521-badbind.asc
 200 ],
 201 [1],
 202 [],
 203 [error: /data/keys/CVE-2021-3521-badbind.asc: key 1 import failed.]
 204 )
 205 AT_CHECK([
 206 runroot rpmkeys --import /data/keys/CVE-2021-3521-nosubsig.asc
 207 ],
 208 [1],
 209 [],
 210 [error: /data/keys/CVE-2021-3521-nosubsig.asc: key 1 import failed.]
 211 )
 212
 213 AT_CHECK([
 214 runroot rpmkeys --import /data/keys/CVE-2021-3521-nosubsig-last.asc
 215 ],
 216 [1],
 217 [],
 218 [error: /data/keys/CVE-2021-3521-nosubsig-last.asc: key 1 import failed.]
 219 )
 220 AT_CLEANUP
 221
 222 # ------------------------------
 223 # Test pre-built package verification
 224 AT_SETUP([rpmkeys -K <signed> 1])
 225 AT_KEYWORDS([rpmkeys digest signature])
 226 AT_CHECK([
 227 RPMDB_CLEAR
 228 RPMDB_INIT
 229 rm -rf "${TOPDIR}"
 230
 231 runroot rpmkeys -K /data/RPMS/hello-2.0-1.x86_64-signed.rpm
 232 runroot rpmkeys --import /data/keys/rpm.org-rsa-2048-test.pub
 233 runroot rpmkeys -K /data/RPMS/hello-2.0-1.x86_64-signed.rpm
 234 ],
 235 [0],
 236 [[/data/RPMS/hello-2.0-1.x86_64-signed.rpm: digests SIGNATURES NOT OK
 237 /data/RPMS/hello-2.0-1.x86_64-signed.rpm: digests signatures OK
 238 ]],
 239 [])
 240 AT_CLEANUP
 241
 242 # ------------------------------
 243 # Test pre-built package verification
 244 AT_SETUP([rpmkeys -Kv <signed> 1])
 245 AT_KEYWORDS([rpmkeys digest signature])
 246 AT_CHECK([
 247 RPMDB_CLEAR
 248 RPMDB_INIT
 249 rm -rf "${TOPDIR}"
 250
 251 runroot rpmkeys -Kv /data/RPMS/hello-2.0-1.x86_64-signed.rpm
 252 runroot rpmkeys --import /data/keys/rpm.org-rsa-2048-test.pub
 253 runroot rpmkeys -Kv /data/RPMS/hello-2.0-1.x86_64-signed.rpm
 254 runroot rpmkeys -Kv --nodigest /data/RPMS/hello-2.0-1.x86_64-signed.rpm
 255 runroot rpmkeys -Kv --nosignature /data/RPMS/hello-2.0-1.x86_64-signed.rpm
 256 ],
 257 [0],
 258 [/data/RPMS/hello-2.0-1.x86_64-signed.rpm:
 259     Header V4 RSA/SHA256 Signature, key ID 1964c5fc: NOKEY
 260     Header SHA1 digest: OK
 261     Header SHA256 digest: OK
 262     Payload SHA256 digest: OK
 263     V4 RSA/SHA256 Signature, key ID 1964c5fc: NOKEY
 264     MD5 digest: OK
 265 /data/RPMS/hello-2.0-1.x86_64-signed.rpm:
 266     Header V4 RSA/SHA256 Signature, key ID 1964c5fc: OK
 267     Header SHA1 digest: OK
 268     Header SHA256 digest: OK
 269     Payload SHA256 digest: OK
 270     V4 RSA/SHA256 Signature, key ID 1964c5fc: OK
 271     MD5 digest: OK
 272 /data/RPMS/hello-2.0-1.x86_64-signed.rpm:
 273     Header V4 RSA/SHA256 Signature, key ID 1964c5fc: OK
 274     V4 RSA/SHA256 Signature, key ID 1964c5fc: OK
 275 /data/RPMS/hello-2.0-1.x86_64-signed.rpm:
 276     Header SHA1 digest: OK
 277     Header SHA256 digest: OK
 278     Payload SHA256 digest: OK
 279     MD5 digest: OK
 280 ],
 281 [])
 282 AT_CLEANUP
 283
 284 # ------------------------------
 285 # Test pre-built corrupted package verification (corrupted signature)
 286 AT_SETUP([rpmkeys -Kv <corrupted signed> 1])
 287 AT_KEYWORDS([rpmkeys digest signature])
 288 AT_CHECK([
 289 RPMDB_CLEAR
 290 RPMDB_INIT
 291 rm -rf "${TOPDIR}"
 292
 293 pkg="hello-2.0-1.x86_64-signed.rpm"
 294 cp "${RPMTEST}"/data/RPMS/${pkg} "${RPMTEST}"/tmp/${pkg}
 295 dd if=/dev/zero of="${RPMTEST}"/tmp/${pkg} \
 296    conv=notrunc bs=1 seek=264 count=6 2> /dev/null
 297
 298 runroot rpmkeys -Kv /tmp/${pkg}
 299 runroot rpmkeys --import /data/keys/rpm.org-rsa-2048-test.pub
 300 runroot rpmkeys -Kv /tmp/${pkg}
 301 ],
 302 [1],
 303 [/tmp/hello-2.0-1.x86_64-signed.rpm:
 304     Header signature: BAD (package tag 268: invalid OpenPGP signature)
 305     Header SHA1 digest: OK
 306     Header SHA256 digest: OK
 307     Payload SHA256 digest: OK
 308     V4 RSA/SHA256 Signature, key ID 1964c5fc: NOKEY
 309     MD5 digest: OK
 310 /tmp/hello-2.0-1.x86_64-signed.rpm:
 311     Header signature: BAD (package tag 268: invalid OpenPGP signature)
 312     Header SHA1 digest: OK
 313     Header SHA256 digest: OK
 314     Payload SHA256 digest: OK
 315     V4 RSA/SHA256 Signature, key ID 1964c5fc: OK
 316     MD5 digest: OK
 317 ],
 318 [])
 319 AT_CLEANUP
 320 # ------------------------------
 321 # Test pre-built corrupted package verification (corrupted header)
 322 AT_SETUP([rpmkeys -Kv <corrupted signed> 2])
 323 AT_KEYWORDS([rpmkeys digest signature])
 324 AT_CHECK([
 325 RPMDB_CLEAR
 326 RPMDB_INIT
 327 rm -rf "${TOPDIR}"
 328
 329 pkg="hello-2.0-1.x86_64-signed.rpm"
 330 cp "${RPMTEST}"/data/RPMS/${pkg} "${RPMTEST}"/tmp/${pkg}
 331 dd if=/dev/zero of="${RPMTEST}"/tmp/${pkg} \
 332    conv=notrunc bs=1 seek=5555 count=6 2> /dev/null
 333
 334 runroot rpmkeys -Kv /tmp/${pkg}
 335 runroot rpmkeys --import /data/keys/rpm.org-rsa-2048-test.pub
 336 runroot rpmkeys -Kv /tmp/${pkg}
 337 ],
 338 [1],
 339 [/tmp/hello-2.0-1.x86_64-signed.rpm:
 340     Header V4 RSA/SHA256 Signature, key ID 1964c5fc: BAD
 341     Header SHA1 digest: BAD (Expected 5cd9874c510b67b44483f9e382a1649ef7743bac != 4261b2c1eb861a4152c2239bce20bfbcaa8971ba)
 342     Header SHA256 digest: BAD (Expected ef920781af3bf072ae9888eec3de1c589143101dff9cc0b561468d395fb766d9 != 29fdfe92782fb0470a9a164a6c94af87d3b138c63b39d4c30e0223ca1202ba82)
 343     Payload SHA256 digest: OK
 344     V4 RSA/SHA256 Signature, key ID 1964c5fc: BAD
 345     MD5 digest: BAD (Expected 137ca1d8b35cca02a1854ba301c5432e != de65519eeb4ab52eb076ec054d42e34e)
 346 /tmp/hello-2.0-1.x86_64-signed.rpm:
 347     Header V4 RSA/SHA256 Signature, key ID 1964c5fc: BAD
 348     Header SHA1 digest: BAD (Expected 5cd9874c510b67b44483f9e382a1649ef7743bac != 4261b2c1eb861a4152c2239bce20bfbcaa8971ba)
 349     Header SHA256 digest: BAD (Expected ef920781af3bf072ae9888eec3de1c589143101dff9cc0b561468d395fb766d9 != 29fdfe92782fb0470a9a164a6c94af87d3b138c63b39d4c30e0223ca1202ba82)
 350     Payload SHA256 digest: OK
 351     V4 RSA/SHA256 Signature, key ID 1964c5fc: BAD
 352     MD5 digest: BAD (Expected 137ca1d8b35cca02a1854ba301c5432e != de65519eeb4ab52eb076ec054d42e34e)
 353 ],
 354 [])
 355 AT_CLEANUP
 356
 357 # ------------------------------
 358 # Test pre-built corrupted package verification (corrupted payload)
 359 AT_SETUP([rpmkeys -Kv <corrupted signed> 3])
 360 AT_KEYWORDS([rpmkeys digest signature])
 361 AT_CHECK([
 362 RPMDB_CLEAR
 363 RPMDB_INIT
 364 rm -rf "${TOPDIR}"
 365
 366 pkg="hello-2.0-1.x86_64-signed.rpm"
 367 cp "${RPMTEST}"/data/RPMS/${pkg} "${RPMTEST}"/tmp/${pkg}
 368 dd if=/dev/zero of="${RPMTEST}"/tmp/${pkg} \
 369    conv=notrunc bs=1 seek=7777 count=6 2> /dev/null
 370
 371 runroot rpmkeys -Kv /tmp/${pkg}
 372 runroot rpmkeys --import /data/keys/rpm.org-rsa-2048-test.pub
 373 runroot rpmkeys -Kv /tmp/${pkg}
 374 ],
 375 [1],
 376 [/tmp/hello-2.0-1.x86_64-signed.rpm:
 377     Header V4 RSA/SHA256 Signature, key ID 1964c5fc: NOKEY
 378     Header SHA1 digest: OK
 379     Header SHA256 digest: OK
 380     Payload SHA256 digest: BAD (Expected 84a7338287bf19715c4eed0243f5cdb447eeb0ade37b2af718d4060aefca2f7c != bea903609dceac36e1f26a983c493c98064d320fdfeb423034ed63d649b2c8dc)
 381     V4 RSA/SHA256 Signature, key ID 1964c5fc: BAD
 382     MD5 digest: BAD (Expected 137ca1d8b35cca02a1854ba301c5432e != d662cd0d81601a7107312684ad1ddf38)
 383 /tmp/hello-2.0-1.x86_64-signed.rpm:
 384     Header V4 RSA/SHA256 Signature, key ID 1964c5fc: OK
 385     Header SHA1 digest: OK
 386     Header SHA256 digest: OK
 387     Payload SHA256 digest: BAD (Expected 84a7338287bf19715c4eed0243f5cdb447eeb0ade37b2af718d4060aefca2f7c != bea903609dceac36e1f26a983c493c98064d320fdfeb423034ed63d649b2c8dc)
 388     V4 RSA/SHA256 Signature, key ID 1964c5fc: BAD
 389     MD5 digest: BAD (Expected 137ca1d8b35cca02a1854ba301c5432e != d662cd0d81601a7107312684ad1ddf38)
 390 ],
 391 [])
 392 AT_CLEANUP
 393
 394 # ------------------------------
 395 # Test --addsign
 396 AT_SETUP([rpmsign --addsign <unsigned>])
 397 AT_KEYWORDS([rpmsign signature])
 398 AT_CHECK([
 399 RPMDB_CLEAR
 400 RPMDB_INIT
 401 rm -rf "${TOPDIR}"
 402
 403 cp "${RPMTEST}"/data/RPMS/hello-2.0-1.x86_64.rpm "${RPMTEST}"/tmp/
 404 run rpmsign --key-id 1964C5FC --addsign "${RPMTEST}"/tmp/hello-2.0-1.x86_64.rpm > /dev/null
 405 echo PRE-IMPORT
 406 runroot rpmkeys -Kv /tmp/hello-2.0-1.x86_64.rpm|grep -v digest
 407 echo POST-IMPORT
 408 runroot rpmkeys --import /data/keys/rpm.org-rsa-2048-test.pub
 409 runroot rpmkeys -Kv /tmp/hello-2.0-1.x86_64.rpm|grep -v digest
 410 run rpmsign --delsign "${RPMTEST}"/tmp/hello-2.0-1.x86_64.rpm > /dev/null
 411 echo POST-DELSIGN
 412 runroot rpmkeys -Kv /tmp/hello-2.0-1.x86_64.rpm|grep -v digest
 413 ],
 414 [0],
 415 [PRE-IMPORT
 416 /tmp/hello-2.0-1.x86_64.rpm:
 417     Header V4 RSA/SHA256 Signature, key ID 1964c5fc: NOKEY
 418     V4 RSA/SHA256 Signature, key ID 1964c5fc: NOKEY
 419 POST-IMPORT
 420 /tmp/hello-2.0-1.x86_64.rpm:
 421     Header V4 RSA/SHA256 Signature, key ID 1964c5fc: OK
 422     V4 RSA/SHA256 Signature, key ID 1964c5fc: OK
 423 POST-DELSIGN
 424 /tmp/hello-2.0-1.x86_64.rpm:
 425 ],
 426 [])
 427 AT_CLEANUP
 428
 429 # ------------------------------
 430 # Test --delsign
 431 AT_SETUP([rpmsign --delsign <package>])
 432 AT_KEYWORDS([rpmsign signature])
 433 AT_CHECK([
 434 RPMDB_CLEAR
 435 RPMDB_INIT
 436 rm -rf "${TOPDIR}"
 437
 438 cp "${RPMTEST}"/data/RPMS/hello-2.0-1.x86_64-signed.rpm "${RPMTEST}"/tmp/
 439 echo PRE-DELSIGN
 440 runroot rpmkeys -Kv /tmp/hello-2.0-1.x86_64-signed.rpm|grep -v digest
 441 echo POST-DELSIGN
 442 run rpmsign --delsign "${RPMTEST}"/tmp/hello-2.0-1.x86_64-signed.rpm > /dev/null
 443 runroot rpmkeys -Kv /tmp/hello-2.0-1.x86_64-signed.rpm|grep -v digest
 444 ],
 445 [0],
 446 [PRE-DELSIGN
 447 /tmp/hello-2.0-1.x86_64-signed.rpm:
 448     Header V4 RSA/SHA256 Signature, key ID 1964c5fc: NOKEY
 449     V4 RSA/SHA256 Signature, key ID 1964c5fc: NOKEY
 450 POST-DELSIGN
 451 /tmp/hello-2.0-1.x86_64-signed.rpm:
 452 ],
 453 [])
 454 AT_CLEANUP
 455
 456 # ------------------------------
 457 # Test --addsign
 458 AT_SETUP([rpmsign --addsign <signed>])
 459 AT_KEYWORDS([rpmsign signature])
 460 AT_CHECK([
 461 RPMDB_CLEAR
 462 RPMDB_INIT
 463 rm -rf "${TOPDIR}"
 464
 465 cp "${RPMTEST}"/data/RPMS/hello-2.0-1.x86_64-signed.rpm "${RPMTEST}"/tmp/
 466 run rpmsign --key-id 1964C5FC --addsign "${RPMTEST}"/tmp/hello-2.0-1.x86_64-signed.rpm 2>&1 |grep -q "already contains identical signature, skipping"
 467 ],
 468 [0],
 469 [],
 470 [])
 471 AT_CLEANUP