t/lib-gpg.sh

   1 # We always set GNUPGHOME, even if no usable GPG was found, as
   2 #
   3 # - It does not hurt, and
   4 #
   5 # - we cannot set global environment variables in lazy prereqs because they are
   6 #   executed in an eval'ed subshell that changes the working directory to a
   7 #   temporary one.
   8
   9 GNUPGHOME="$PWD/gpghome"
  10 export GNUPGHOME
  11
  12 test_lazy_prereq GPG '
  13         gpg_version=$(gpg --version 2>&1)
  14         test $? != 127 || exit 1
  15
  16         # As said here: http://www.gnupg.org/documentation/faqs.html#q6.19
  17         # the gpg version 1.0.6 did not parse trust packets correctly, so for
  18         # that version, creation of signed tags using the generated key fails.
  19         case "$gpg_version" in
  20         "gpg (GnuPG) 1.0.6"*)
  21                 say "Your version of gpg (1.0.6) is too buggy for testing"
  22                 exit 1
  23                 ;;
  24         *)
  25                 # Available key info:
  26                 # * Type DSA and Elgamal, size 2048 bits, no expiration date,
  27                 #   name and email: C O Mitter <committer@example.com>
  28                 # * Type RSA, size 2048 bits, no expiration date,
  29                 #   name and email: Eris Discordia <discord@example.net>
  30                 # No password given, to enable non-interactive operation.
  31                 # To generate new key:
  32                 #       gpg --homedir /tmp/gpghome --gen-key
  33                 # To write armored exported key to keyring:
  34                 #       gpg --homedir /tmp/gpghome --export-secret-keys \
  35                 #               --armor 0xDEADBEEF >> lib-gpg/keyring.gpg
  36                 #       gpg --homedir /tmp/gpghome --export \
  37                 #               --armor 0xDEADBEEF >> lib-gpg/keyring.gpg
  38                 # To export ownertrust:
  39                 #       gpg --homedir /tmp/gpghome --export-ownertrust \
  40                 #               > lib-gpg/ownertrust
  41                 mkdir "$GNUPGHOME" &&
  42                 chmod 0700 "$GNUPGHOME" &&
  43                 (gpgconf --kill gpg-agent || : ) &&
  44                 gpg --homedir "${GNUPGHOME}" --import \
  45                         "$TEST_DIRECTORY"/lib-gpg/keyring.gpg &&
  46                 gpg --homedir "${GNUPGHOME}" --import-ownertrust \
  47                         "$TEST_DIRECTORY"/lib-gpg/ownertrust &&
  48                 gpg --homedir "${GNUPGHOME}" </dev/null >/dev/null \
  49                         --sign -u committer@example.com
  50                 ;;
  51         esac
  52 '
  53
  54 test_lazy_prereq GPGSM '
  55         test_have_prereq GPG &&
  56         # Available key info:
  57         # * see t/lib-gpg/gpgsm-gen-key.in
  58         # To generate new certificate:
  59         #  * no passphrase
  60         #       gpgsm --homedir /tmp/gpghome/ \
  61         #               -o /tmp/gpgsm.crt.user \
  62         #               --generate-key \
  63         #               --batch t/lib-gpg/gpgsm-gen-key.in
  64         # To import certificate:
  65         #       gpgsm --homedir /tmp/gpghome/ \
  66         #               --import /tmp/gpgsm.crt.user
  67         # To export into a .p12 we can later import:
  68         #       gpgsm --homedir /tmp/gpghome/ \
  69         #               -o t/lib-gpg/gpgsm_cert.p12 \
  70         #               --export-secret-key-p12 "committer@example.com"
  71         echo | gpgsm --homedir "${GNUPGHOME}" \
  72                 --passphrase-fd 0 --pinentry-mode loopback \
  73                 --import "$TEST_DIRECTORY"/lib-gpg/gpgsm_cert.p12 &&
  74
  75         gpgsm --homedir "${GNUPGHOME}" -K |
  76         grep fingerprint: |
  77         cut -d" " -f4 |
  78         tr -d "\\n" >"${GNUPGHOME}/trustlist.txt" &&
  79
  80         echo " S relax" >>"${GNUPGHOME}/trustlist.txt" &&
  81         echo hello | gpgsm --homedir "${GNUPGHOME}" >/dev/null \
  82                -u committer@example.com -o /dev/null --sign -
  83 '
  84
  85 test_lazy_prereq RFC1991 '
  86         test_have_prereq GPG &&
  87         echo | gpg --homedir "${GNUPGHOME}" -b --rfc1991 >/dev/null
  88 '
  89
  90 sanitize_pgp() {
  91         perl -ne '
  92                 /^-----END PGP/ and $in_pgp = 0;
  93                 print unless $in_pgp;
  94                 /^-----BEGIN PGP/ and $in_pgp = 1;
  95         '
  96 }