Compare commits
2 commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
245aa68901 | ||
|
|
50bab13ba1 |
80 changed files with 10 additions and 807 deletions
|
|
@ -1 +0,0 @@
|
|||
1
|
||||
0
.gitignore
vendored
Normal file
0
.gitignore
vendored
Normal file
14
gating.yaml
14
gating.yaml
|
|
@ -1,14 +0,0 @@
|
|||
--- !Policy
|
||||
product_versions:
|
||||
- fedora-*
|
||||
decision_context: bodhi_update_push_testing
|
||||
subject_type: koji_build
|
||||
rules:
|
||||
- !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional}
|
||||
--- !Policy
|
||||
product_versions:
|
||||
- fedora-*
|
||||
decision_context: bodhi_update_push_stable
|
||||
subject_type: koji_build
|
||||
rules:
|
||||
- !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional}
|
||||
193
gpgverify
193
gpgverify
|
|
@ -1,193 +0,0 @@
|
|||
#!/bin/bash
|
||||
|
||||
# Copyright 2018 – 2024 B. Persson, Bjorn@Rombobeorn.se
|
||||
#
|
||||
# This material is provided as is, with absolutely no warranty expressed
|
||||
# or implied. Any use is at your own risk.
|
||||
#
|
||||
# Permission is hereby granted to use or copy this program
|
||||
# for any purpose, provided the above notices are retained on all copies.
|
||||
# Permission to modify the code and to distribute modified code is granted,
|
||||
# provided the above notices are retained, and a notice that the code was
|
||||
# modified is included with the above copyright notice.
|
||||
|
||||
|
||||
function print_help {
|
||||
cat <<'EOF'
|
||||
gpgverify is a wrapper around gpgv designed for easy and safe scripting. It
|
||||
verifies a file against an OpenPGP signature and one or more keyrings. The
|
||||
keyrings shall together contain all the keys that are trusted to certify the
|
||||
authenticity of the file, and must not contain any untrusted keys.
|
||||
|
||||
To verify a detached signature, where the signature and the signed data are two
|
||||
separate files, both --signature and --data must be given:
|
||||
gpgverify --keyring=<pathname> --signature=<pathname> --data=<pathname>
|
||||
gpgverify --keyrings <pathname>... --signature=<pathname> --data=<pathname>
|
||||
|
||||
If the signature is embedded in the signed file, give --data and --output:
|
||||
gpgverify --keyring=<pathname> --data=<pathname> --output=<pathname>
|
||||
gpgverify --keyrings <pathname>... --data=<pathname> --output=<pathname>
|
||||
|
||||
The verified data will be written to the output file. An output file is required
|
||||
even for a clearsigned text file, because a clearsigned block can be surrounded
|
||||
by unsigned text. A program that trusts the contents of a clearsigned file after
|
||||
verifying the signature is vulnerable to spoofing. Only the contents of the
|
||||
output file can be trusted.
|
||||
|
||||
The differences, compared to invoking gpgv directly, are that gpgverify accepts
|
||||
keyrings in either ASCII-armored or unarmored form, that it won't accidentally
|
||||
use a default keyring in addition to the specified ones, and that it insists on
|
||||
writing an output file if the signature is not detached.
|
||||
|
||||
Parameters:
|
||||
--keyring=<pathname> keyring with only trusted keys (can be repeated)
|
||||
--keyrings Multiple keyrings with only trusted keys follow.
|
||||
--signature=<pathname> detached signature to verify
|
||||
--data=<pathname> signed file to verify, or data file to verify against
|
||||
a detached signature
|
||||
--output=<pathname> file to write the verified data to when the signature
|
||||
is embedded in the signed file
|
||||
EOF
|
||||
}
|
||||
|
||||
|
||||
function fatal_error {
|
||||
message="$1" # an error message
|
||||
status=$2 # a number to use as the exit code
|
||||
echo "gpgverify: $message" >&2
|
||||
exit $status
|
||||
}
|
||||
|
||||
|
||||
function parameter_error {
|
||||
message="$1" # an error message
|
||||
fatal_error "${message}" 2
|
||||
}
|
||||
|
||||
|
||||
function require_parameter {
|
||||
term="$1" # a term for a required parameter
|
||||
value="$2" # Complain and terminate if this value is empty.
|
||||
if test -z "${value}" ; then
|
||||
parameter_error "No ${term} was provided."
|
||||
fi
|
||||
}
|
||||
|
||||
|
||||
function check_status {
|
||||
action="$1" # a string that describes the action that was attempted
|
||||
status=$2 # the exit code of the command
|
||||
if test $status -ne 0 ; then
|
||||
fatal_error "$action failed." $status
|
||||
fi
|
||||
}
|
||||
|
||||
|
||||
# Parse the command line.
|
||||
keyring_parameters=false
|
||||
keyrings=() # empty array
|
||||
signature=
|
||||
data=
|
||||
output=
|
||||
for parameter in "$@" ; do
|
||||
if [[ "${parameter}" = -* ]] ; then
|
||||
# This parameter begins with a dash, so it's not part of any list of
|
||||
# keyrings.
|
||||
keyring_parameters=false
|
||||
fi
|
||||
case "${parameter}" in
|
||||
(--help)
|
||||
print_help
|
||||
exit
|
||||
;;
|
||||
(--keyrings)
|
||||
# The following parameters will be keyring pathnames until one
|
||||
# begins with a dash.
|
||||
keyring_parameters=true
|
||||
;;
|
||||
(--keyring=*)
|
||||
keyrings+=("${parameter#*=}")
|
||||
;;
|
||||
(--signature=*)
|
||||
if test -n "${signature}" ; then
|
||||
# This is a second occurrence of --signature.
|
||||
parameter_error 'Only one signature at a time can be verified.'
|
||||
fi
|
||||
signature="${parameter#*=}"
|
||||
;;
|
||||
(--data=*)
|
||||
if test -n "${data}" ; then
|
||||
# This is a second occurrence of --data.
|
||||
parameter_error 'Only one data file at a time can be verified.'
|
||||
fi
|
||||
data="${parameter#*=}"
|
||||
;;
|
||||
(--output=*)
|
||||
if test -n "${output}" ; then
|
||||
# This is a second occurrence of --output.
|
||||
parameter_error 'Only one output file can be written.'
|
||||
fi
|
||||
output="${parameter#*=}"
|
||||
;;
|
||||
(*)
|
||||
if ${keyring_parameters} ; then
|
||||
keyrings+=("${parameter}")
|
||||
else
|
||||
parameter_error "Unknown parameter: \"${parameter}\""
|
||||
fi
|
||||
;;
|
||||
esac
|
||||
done
|
||||
require_parameter 'keyring' "${keyrings}"
|
||||
require_parameter 'data file' "${data}"
|
||||
|
||||
# If no detached signature is provided, then the signature is embedded in the
|
||||
# data file, and there must be an output file to write the verified data to –
|
||||
# even if the data file is clearsigned.
|
||||
if test -z "${signature}${output}" ; then
|
||||
msg='Neither a signature nor an output file was provided. '
|
||||
msg+='Trusting a clearsigned file without stripping off unsigned text '
|
||||
msg+='makes you vulnerable to spoofing.'
|
||||
parameter_error "${msg}"
|
||||
fi
|
||||
|
||||
# Make a temporary working directory.
|
||||
workdir="$(mktemp --directory)"
|
||||
check_status 'Making a temporary directory' $?
|
||||
|
||||
# Decode any ASCII armor on the keyrings.
|
||||
keyring_params=() # empty array
|
||||
number=1
|
||||
for keyring in "${keyrings[@]}" ; do
|
||||
if grep --quiet '^-----BEGIN PGP PUBLIC KEY BLOCK-----' "${keyring}" ; then
|
||||
# This looks like an ASCII-armored keyring.
|
||||
ring="${workdir}/keyring${number}.gpg"
|
||||
gpg2 --homedir="${workdir}" --yes --output="${ring}" --dearmor \
|
||||
"${keyring}"
|
||||
check_status "Decoding the keyring \"${keyring}\"" $?
|
||||
((++number))
|
||||
else
|
||||
# This is not an ASCII-armored keyring. Don't dearmor it, but ensure
|
||||
# that the pathname contains slashes to prevent GnuPG from looking for
|
||||
# the file in the wrong place.
|
||||
ring=`realpath "${keyring}" --canonicalize-existing`
|
||||
check_status 'Accessing a keyring' $?
|
||||
fi
|
||||
keyring_params+=("--keyring=${ring}")
|
||||
done
|
||||
|
||||
# Verify the signature using the decoded keyrings.
|
||||
# The signature pathname shall be a single parameter even if it contains
|
||||
# whitespace, but shall be omitted entirely if it's an empty string.
|
||||
gpgv2 --homedir="${workdir}" "${keyring_params[@]}" \
|
||||
${output:+"--output=${output}"} ${signature:+"${signature}"} "${data}"
|
||||
check_status 'Signature verification' $?
|
||||
|
||||
# (--homedir isn't actually necessary. --dearmor processes only the input file,
|
||||
# and if --keyring is used and contains a slash, then gpgv2 uses only that
|
||||
# keyring. Thus neither command will look for a default keyring, but --homedir
|
||||
# makes extra double sure that no default keyring will be touched in case
|
||||
# another version of GPG works differently.)
|
||||
|
||||
# Clean up. (This is not done in case of an error that may need inspection.)
|
||||
rm --recursive --force ${workdir}
|
||||
|
|
@ -1,61 +1,24 @@
|
|||
Name: gpgverify
|
||||
Version: 2.2
|
||||
Release: 3%{?dist}
|
||||
Version: 1
|
||||
Release: 1%{?dist}
|
||||
Summary: Signature verifier for easy and safe scripting
|
||||
|
||||
License: Boehm-GC
|
||||
URL: https://src.fedoraproject.org/rpms/gpgverify
|
||||
Source: gpgverify
|
||||
Source: macros.gpgverify.in
|
||||
Source: license.txt
|
||||
BuildArch: noarch
|
||||
|
||||
Requires: grep gnupg2 gnupg2-verify
|
||||
Requires: gnupg2
|
||||
Requires: redhat-rpm-config < 343
|
||||
|
||||
%description
|
||||
GPGverify is a wrapper around GnuPG's gpgv. It verifies a file against an
|
||||
OpenPGP signature and one or more keyrings. Rather than assuming manual use by
|
||||
a knowledgeable user, GPGverify is designed to be easy to use safely in a
|
||||
script. It avoids various unsafe ways of using gpgv that could make a script
|
||||
vulnerable.
|
||||
In EPEL 8 to 10, this is a compatibility metapackage. It allows spec files to
|
||||
require "gpgverify" like in Fedora. The actual GPGverify is in redhat-rpm-
|
||||
config.
|
||||
|
||||
%prep
|
||||
# Enable use of filenames instead of source numbers.
|
||||
%setup -c -T
|
||||
cp --preserve=timestamps %{sources} .
|
||||
|
||||
%conf
|
||||
# Convey the location of the shellscript to macros.gpgverify. To keep build
|
||||
# dependencies minimal, do substitution in Bash instead of something like Sed.
|
||||
macrofile=$(<macros.gpgverify.in)
|
||||
echo -E "${macrofile/@libexecdir@/'%{_libexecdir}'}" >macros.gpgverify
|
||||
|
||||
%install
|
||||
mkdir --parents %{buildroot}%{rpmmacrodir} %{buildroot}%{_libexecdir}
|
||||
cp --preserve=timestamps gpgverify %{buildroot}%{_libexecdir}/
|
||||
cp macros.gpgverify %{buildroot}%{rpmmacrodir}/
|
||||
In Fedora 43 GPGverify has been split out into a separate package.
|
||||
|
||||
%files
|
||||
%attr(0755,-,-) %{_libexecdir}/gpgverify
|
||||
%attr(0644,-,-) %{rpmmacrodir}/macros.gpgverify
|
||||
%license license.txt
|
||||
|
||||
%changelog
|
||||
* Thu Jul 24 2025 Fedora Release Engineering <releng@fedoraproject.org> - 2.2-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
|
||||
|
||||
* Tue Jul 15 2025 Björn Persson <Bjorn@Rombobjörn.se> - 2.2-2
|
||||
- Adapted the dependencies because the gnupg2 package has been split.
|
||||
|
||||
* Fri Jun 27 2025 Björn Persson <Bjorn@Rombobjörn.se> - 2.2-1
|
||||
- Evaluate _libexecdir at build time, not at run time (reported by Yaakov
|
||||
Selkowitz).
|
||||
|
||||
* Fri May 09 2025 Björn Persson <Bjorn@Rombobjörn.se> - 2.1-3
|
||||
- Rebuilt to retry the testsuite.
|
||||
|
||||
* Wed May 07 2025 Björn Persson <Bjorn@Rombobjörn.se> - 2.1-2
|
||||
- Added a separate license file.
|
||||
|
||||
* Mon Apr 14 2025 Björn Persson <Bjorn@Rombobjörn.se> - 2.1-1
|
||||
- GPGverify has been split out from redhat-rpm-config.
|
||||
* Fri May 9 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- metapackage created
|
||||
|
|
|
|||
12
license.txt
12
license.txt
|
|
@ -1,12 +0,0 @@
|
|||
Copyright 2018 – 2024 B. Persson, Bjorn@Rombobeorn.se
|
||||
|
||||
This material is provided as is, with absolutely no warranty expressed
|
||||
or implied. Any use is at your own risk.
|
||||
|
||||
Permission is hereby granted to use or copy this program
|
||||
for any purpose, provided the above notices are retained on all copies.
|
||||
Permission to modify the code and to distribute modified code is granted,
|
||||
provided the above notices are retained, and a notice that the code was
|
||||
modified is included with the above copyright notice.
|
||||
|
||||
A few files have other copyright holders.
|
||||
|
|
@ -1,30 +0,0 @@
|
|||
# Copyright 2019 Miro Hrončok
|
||||
# Copyright 2025 Björn Persson, Bjorn@Rombobeorn.se
|
||||
#
|
||||
# This material is provided as is, with absolutely no warranty expressed
|
||||
# or implied. Any use is at your own risk.
|
||||
#
|
||||
# Permission is hereby granted to use or copy this program
|
||||
# for any purpose, provided the above notices are retained on all copies.
|
||||
# Permission to modify the code and to distribute modified code is granted,
|
||||
# provided the above notices are retained, and a notice that the code was
|
||||
# modified is included with the above copyright notice.
|
||||
|
||||
|
||||
# gpgverify verifies signed sources. There is documentation in the script.
|
||||
%gpgverify(k:s:d:) %{lua:
|
||||
local script = rpm.expand("@libexecdir@/gpgverify ")
|
||||
local keyring = rpm.expand("%{-k*}")
|
||||
local signature = rpm.expand("%{-s*}")
|
||||
local data = rpm.expand("%{-d*}")
|
||||
print(script)
|
||||
if keyring ~= "" then
|
||||
print(rpm.expand("--keyring='%{SOURCE" .. keyring .. "}' "))
|
||||
end
|
||||
if signature ~= "" then
|
||||
print(rpm.expand("--signature='%{SOURCE" .. signature .. "}' "))
|
||||
end
|
||||
if data ~= "" then
|
||||
print(rpm.expand("--data='%{SOURCE" .. data .. "}' "))
|
||||
end
|
||||
}
|
||||
Binary file not shown.
|
|
@ -1,7 +0,0 @@
|
|||
-----BEGIN PGP SIGNATURE-----
|
||||
|
||||
iHUEABYKAB0WIQR9GjJ6xDDwYQebheulmOS1Lv+uEQUCZ4D1CwAKCRClmOS1Lv+u
|
||||
EWl2AQCrOjyhqoudwwZpec/01Mr71sLaY9ZTiLcMrpPgEAzMLAEA1X1mkbso14nh
|
||||
gK98UWd+rNV2cKq2S2obVuElQ5KiqQw=
|
||||
=88Ke
|
||||
-----END PGP SIGNATURE-----
|
||||
|
|
@ -1,21 +0,0 @@
|
|||
Name: gpgverify-test-armored
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, ASCII-armored files
|
||||
License: FSFAP
|
||||
Source1: key.asc
|
||||
Source2: dummy.tar.gz
|
||||
Source3: dummy.tar.gz.asc
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
This tests signature verification where the key and the signature are ASCII-
|
||||
armored.
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyring='%{SOURCE1}' --data='%{SOURCE2}' --signature='%{SOURCE3}'
|
||||
echo 'Execution of prep continues.'
|
||||
|
||||
%changelog
|
||||
* Fri Jan 10 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
||||
|
||||
mDMEZ4DMQxYJKwYBBAHaRw8BAQdAhKAEwrtQ/pllxlghuM7ay7OZgTkLz1aMxu2d
|
||||
hEN/Tia0CnRlc3Qga2V5IDGIkwQTFgoAOxYhBH0aMnrEMPBhB5uF66WY5LUu/64R
|
||||
BQJngMxDAhsDBQsJCAcCAiICBhUKCQgLAgQWAgMBAh4HAheAAAoJEKWY5LUu/64R
|
||||
uvABAMqGHRsYw/Vs70axCgENNQ1jJuIKU6x6Sb5F4p5TETqIAP9edVC13EvH03zy
|
||||
xjbJblfWaNwsA4Z5lTasp7NTKUg0Cw==
|
||||
=LJAl
|
||||
-----END PGP PUBLIC KEY BLOCK-----
|
||||
|
|
@ -1 +0,0 @@
|
|||
summary: gpgverify testcase, ASCII-armored files
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1,20 +0,0 @@
|
|||
Name: gpgverify-test-bad-signer
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, bad signer
|
||||
License: FSFAP
|
||||
Source1: key.gpg
|
||||
Source2: dummy.tar.gz
|
||||
Source3: dummy.tar.gz.sig
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
Building this package shall fail because the signature is made with another key.
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyring='%{SOURCE1}' --data='%{SOURCE2}' --signature='%{SOURCE3}'
|
||||
echo 'Execution of prep continues.'
|
||||
|
||||
%changelog
|
||||
* Fri Jan 10 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
|
|
@ -1,5 +0,0 @@
|
|||
summary: gpgverify testcase, bad signer
|
||||
|
||||
environment:
|
||||
test_kind: "negative"
|
||||
required_output: "gpgverify: Signature verification failed."
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1,21 +0,0 @@
|
|||
Name: gpgverify-test-bad-tarball
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, bad tarball
|
||||
License: FSFAP
|
||||
Source1: key.gpg
|
||||
Source2: dummy.tar.gz
|
||||
Source3: dummy.tar.gz.sig
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
Building this package shall fail because the tarball doesn't match the
|
||||
signature.
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyring='%{SOURCE1}' --data='%{SOURCE2}' --signature='%{SOURCE3}'
|
||||
echo 'Execution of prep continues.'
|
||||
|
||||
%changelog
|
||||
* Fri Jan 10 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
|
|
@ -1,5 +0,0 @@
|
|||
summary: gpgverify testcase, bad tarball
|
||||
|
||||
environment:
|
||||
test_kind: "negative"
|
||||
required_output: "gpgverify: Signature verification failed."
|
||||
|
|
@ -1,18 +0,0 @@
|
|||
unsigned garbage
|
||||
-----BEGIN PGP SIGNED MESSAGE-----
|
||||
Hash: SHA512
|
||||
|
||||
Copying and distribution of this file, with or without modification, are
|
||||
permitted in any medium without royalty provided the copyright notice and
|
||||
this notice are preserved. This file is offered as-is, without any warranty.
|
||||
|
||||
This file represents a clearsigned text file.
|
||||
-----BEGIN PGP SIGNATURE-----
|
||||
|
||||
iHUEARYKAB0WIQR9GjJ6xDDwYQebheulmOS1Lv+uEQUCZ4D22wAKCRClmOS1Lv+u
|
||||
Ef/pAP9JuYRLjob/bRWanpPMo7gW0KpE9qE2dbwGHeBfLKi/4QD+MGTlpEZOam1W
|
||||
AAsUsGu586wv3q9TTGOmITmokrkl7Q4=
|
||||
=lunw
|
||||
unsigned garbage
|
||||
-----END PGP SIGNATURE-----
|
||||
unsigned garbage
|
||||
|
|
@ -1,22 +0,0 @@
|
|||
Name: gpgverify-test-bad-usage
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, insecure clearsigned usage
|
||||
License: FSFAP
|
||||
Source1: key.gpg
|
||||
Source2: dummy.txt.asc
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
Building this package shall fail because it tries to verify a clearsigned text
|
||||
file in an insecure way. The --output parameter is missing.
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyring='%{SOURCE1}' --data='%{SOURCE2}'
|
||||
echo 'Execution of prep continues.'
|
||||
# A naive packager would now pass dummy.txt.asc directly to some other program,
|
||||
# thinking it has been verified, unaware that it contains unsigned parts.
|
||||
|
||||
%changelog
|
||||
* Sat Jan 11 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
|
|
@ -1,5 +0,0 @@
|
|||
summary: gpgverify testcase, insecure clearsigned usage
|
||||
|
||||
environment:
|
||||
test_kind: "negative"
|
||||
required_output: "gpgverify: Neither a signature nor an output file was provided."
|
||||
|
|
@ -1,18 +0,0 @@
|
|||
unsigned garbage
|
||||
-----BEGIN PGP SIGNED MESSAGE-----
|
||||
Hash: SHA512
|
||||
|
||||
Copying and distribution of this file, with or without modification, are
|
||||
permitted in any medium without royalty provided the copyright notice and
|
||||
this notice are preserved. This file is offered as-is, without any warranty.
|
||||
|
||||
This file represents a clearsigned text file.
|
||||
-----BEGIN PGP SIGNATURE-----
|
||||
|
||||
iHUEARYKAB0WIQR9GjJ6xDDwYQebheulmOS1Lv+uEQUCZ4D22wAKCRClmOS1Lv+u
|
||||
Ef/pAP9JuYRLjob/bRWanpPMo7gW0KpE9qE2dbwGHeBfLKi/4QD+MGTlpEZOam1W
|
||||
AAsUsGu586wv3q9TTGOmITmokrkl7Q4=
|
||||
=lunw
|
||||
unsigned garbage
|
||||
-----END PGP SIGNATURE-----
|
||||
unsigned garbage
|
||||
|
|
@ -1,23 +0,0 @@
|
|||
Name: gpgverify-test-clearsigned
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, clearsigned text file
|
||||
License: FSFAP
|
||||
Source1: key.gpg
|
||||
Source2: dummy.txt.asc
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
This tests verifying a clearsigned text file. The clearsigned file includes
|
||||
unsigned parts, which must be excluded from the verified text.
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyring='%{SOURCE1}' --data='%{SOURCE2}' --output=verified.txt
|
||||
echo 'Execution of prep continues.'
|
||||
# The verified text would now be processed by some other program, such as
|
||||
# sha512sum. Here it's instead output for inspection by test-rpmbuild.
|
||||
cat verified.txt
|
||||
|
||||
%changelog
|
||||
* Sat Jan 11 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
|
|
@ -1,5 +0,0 @@
|
|||
summary: gpgverify testcase, clearsigned text file
|
||||
|
||||
environment:
|
||||
required_output: "This file represents a clearsigned text file."
|
||||
forbidden_output: "garbage"
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1,21 +0,0 @@
|
|||
Name: gpgverify-test-expired
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, expired key
|
||||
License: FSFAP
|
||||
Source1: key.gpg
|
||||
Source2: dummy.tar.gz
|
||||
Source3: dummy.tar.gz.sig
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
This tests signature verification with an expired key. Rebuilds shall not fail
|
||||
just because the clock has ticked past an arbitrary date.
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyring='%{SOURCE1}' --data='%{SOURCE2}' --signature='%{SOURCE3}'
|
||||
echo 'Execution of prep continues.'
|
||||
|
||||
%changelog
|
||||
* Fri Jan 10 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
|
|
@ -1 +0,0 @@
|
|||
summary: gpgverify testcase, expired key
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1,20 +0,0 @@
|
|||
Name: gpgverify-test-invalid-keyring
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, invalid keyring
|
||||
License: FSFAP
|
||||
Source1: key.gpg
|
||||
Source2: dummy.tar.gz
|
||||
Source3: dummy.tar.gz.sig
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
Building this package shall fail because the keyring is invalid.
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyring='%{SOURCE1}' --data='%{SOURCE2}' --signature='%{SOURCE3}'
|
||||
echo 'Execution of prep continues.'
|
||||
|
||||
%changelog
|
||||
* Fri Jan 10 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
|
|
@ -1,5 +0,0 @@
|
|||
summary: gpgverify testcase, invalid keyring
|
||||
|
||||
environment:
|
||||
test_kind: "negative"
|
||||
required_output: "gpgverify: Signature verification failed."
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1,23 +0,0 @@
|
|||
Name: gpgverify-test-invalid-parameter
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, invalid parameter
|
||||
License: FSFAP
|
||||
Source1: key.gpg
|
||||
Source2: dummy.tar.gz
|
||||
Source3: dummy.tar.gz.sig
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
Building this package shall fail because "0" is invalid as a parameter to
|
||||
gpgverify. This checks that gpgverify does not have the vulnerability that an
|
||||
attacker tried to inject in this merge request:
|
||||
https://src.fedoraproject.org/rpms/redhat-rpm-config/pull-request/84
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyring='%{SOURCE1}' --data='%{SOURCE2}' --signature='%{SOURCE3}' 0
|
||||
echo 'Execution of prep continues.'
|
||||
|
||||
%changelog
|
||||
* Thu Jan 23 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
|
|
@ -1,5 +0,0 @@
|
|||
summary: gpgverify testcase, invalid parameter
|
||||
|
||||
environment:
|
||||
test_kind: "negative"
|
||||
required_output: "gpgverify: Unknown parameter: \"0\""
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1,20 +0,0 @@
|
|||
Name: gpgverify-test-invalid-signature
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, invalid signature
|
||||
License: FSFAP
|
||||
Source1: key.gpg
|
||||
Source2: dummy.tar.gz
|
||||
Source3: dummy.tar.gz.sig
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
Building this package shall fail because the signature is invalid.
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyring='%{SOURCE1}' --data='%{SOURCE2}' --signature='%{SOURCE3}'
|
||||
echo 'Execution of prep continues.'
|
||||
|
||||
%changelog
|
||||
* Fri Jan 10 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
|
|
@ -1,5 +0,0 @@
|
|||
summary: gpgverify testcase, invalid signature
|
||||
|
||||
environment:
|
||||
test_kind: "negative"
|
||||
required_output: "gpgverify: Signature verification failed."
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1,20 +0,0 @@
|
|||
Name: gpgverify-test-keybox
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, key in a keybox file
|
||||
License: FSFAP
|
||||
Source1: key.kbx
|
||||
Source2: dummy.tar.gz
|
||||
Source3: dummy.tar.gz.sig
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
This tests signature verification with a key in the keybox format.
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyring='%{SOURCE1}' --data='%{SOURCE2}' --signature='%{SOURCE3}'
|
||||
echo 'Execution of prep continues.'
|
||||
|
||||
%changelog
|
||||
* Sun Jan 12 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
|
|
@ -1 +0,0 @@
|
|||
summary: gpgverify testcase, key in a keybox file
|
||||
|
|
@ -1,11 +0,0 @@
|
|||
# The gpgverify testcases have these data in common. The details that differ
|
||||
# are in the subdirectories.
|
||||
|
||||
require:
|
||||
- rpm-build
|
||||
- gpgverify
|
||||
- grep
|
||||
|
||||
test: ../test-rpmbuild
|
||||
# ".." because it's apparently relative to the subdirectory of each testcase,
|
||||
# not relative to this file.
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1,21 +0,0 @@
|
|||
Name: gpgverify-test-stdin
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, standard input
|
||||
License: FSFAP
|
||||
Source1: key.gpg
|
||||
Source2: dummy.tar.gz
|
||||
Source3: dummy.tar.gz.sig
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
This tests gpgverify in a pipeline where the signed data come through the
|
||||
standard input stream.
|
||||
|
||||
%prep
|
||||
cat '%{SOURCE2}' | %{gpgverify} --keyring='%{SOURCE1}' --data=- --signature='%{SOURCE3}'
|
||||
echo 'Execution of prep continues.'
|
||||
|
||||
%changelog
|
||||
* Fri Jan 10 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
|
|
@ -1 +0,0 @@
|
|||
summary: gpgverify testcase, standard input
|
||||
|
|
@ -1,102 +0,0 @@
|
|||
#!/bin/bash
|
||||
|
||||
# Distinguishing between failures and errors isn't possible in all cases, as
|
||||
# RPMbuild uses exit code 1 for more than one kind of error, but this script
|
||||
# still tries to make the distinction where possible.
|
||||
|
||||
# Try to run the prep scriptlet of the spec found in the current directory.
|
||||
# (There is one for each testcase, each in its own directory.) Save a copy of
|
||||
# the output for inspection.
|
||||
rpmbuild --define "_sourcedir ${PWD}" -bp *.spec 2>&1 | tee rpmbuild_output
|
||||
result=${PIPESTATUS[0]} tee_result=${PIPESTATUS[1]}
|
||||
if test "${test_kind}" = negative ; then
|
||||
# This is a negative test. Swap the success and failure codes. Leave any
|
||||
# other value as an error code.
|
||||
case ${result} in
|
||||
(0)
|
||||
echo 'RPMbuild succeeded when it should have failed.'
|
||||
exit 1
|
||||
;;
|
||||
(1)
|
||||
echo 'RPMbuild failed as it should.'
|
||||
result=0
|
||||
;;
|
||||
esac
|
||||
fi
|
||||
if test ${result} -ne 0 ; then
|
||||
exit ${result}
|
||||
fi
|
||||
|
||||
# Any problem with tee is an error in the test.
|
||||
case ${tee_result} in
|
||||
(0)
|
||||
# OK
|
||||
;;
|
||||
(1)
|
||||
exit 2 # Return error, not failure.
|
||||
;;
|
||||
(*)
|
||||
exit ${tee_result}
|
||||
;;
|
||||
esac
|
||||
|
||||
# Check whether commands after the signature verification were executed.
|
||||
grep --quiet --fixed-strings 'Execution of prep continues.' rpmbuild_output
|
||||
result=$?
|
||||
case ${result} in
|
||||
(0)
|
||||
if test "${test_kind}" != negative ; then
|
||||
echo 'Execution continued correctly.'
|
||||
else
|
||||
echo 'Execution continued when it should have stopped.'
|
||||
exit 1
|
||||
fi
|
||||
;;
|
||||
(1)
|
||||
if test "${test_kind}" != negative ; then
|
||||
echo 'Execution stopped when it should have continued.'
|
||||
exit 1
|
||||
else
|
||||
echo 'Execution stopped correctly.'
|
||||
fi
|
||||
;;
|
||||
(*)
|
||||
exit ${result} # error in the test
|
||||
;;
|
||||
esac
|
||||
|
||||
if test -n "${required_output}" ; then
|
||||
# Look for output that must be present.
|
||||
grep --quiet --fixed-strings --regexp="${required_output}" rpmbuild_output
|
||||
result=$?
|
||||
case ${result} in
|
||||
(0)
|
||||
echo "The text \"${required_output}\" was correctly present."
|
||||
;;
|
||||
(1)
|
||||
echo "The text \"${required_output}\" didn't appear where it should."
|
||||
exit 1
|
||||
;;
|
||||
(*)
|
||||
exit ${result} # error in the test
|
||||
;;
|
||||
esac
|
||||
fi
|
||||
|
||||
if test -n "${forbidden_output}" ; then
|
||||
# Look for output that must be absent.
|
||||
grep --quiet --fixed-strings --regexp="${forbidden_output}" rpmbuild_output
|
||||
result=$?
|
||||
case ${result} in
|
||||
(0)
|
||||
echo "The text \"${forbidden_output}\" appeared where it shouldn't."
|
||||
exit 1
|
||||
;;
|
||||
(1)
|
||||
echo "The text \"${forbidden_output}\" was correctly absent."
|
||||
;;
|
||||
(*)
|
||||
exit ${result} # error in the test
|
||||
;;
|
||||
esac
|
||||
fi
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1,21 +0,0 @@
|
|||
Name: gpgverify-test-two-keys
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, two separate keyrings
|
||||
License: FSFAP
|
||||
Source1: key-1.gpg
|
||||
Source2: key-2.gpg
|
||||
Source3: dummy.tar.gz
|
||||
Source4: dummy.tar.gz.sig
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
This tests passing --keyring to gpgverify more than once.
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyring='%{SOURCE1}' --keyring='%{SOURCE2}' --data='%{SOURCE3}' --signature='%{SOURCE4}'
|
||||
echo 'Execution of prep continues.'
|
||||
|
||||
%changelog
|
||||
* Sat Jan 11 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1 +0,0 @@
|
|||
summary: gpgverify testcase, two separate keyrings
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1,21 +0,0 @@
|
|||
Name: gpgverify-test-unarmored
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, no ASCII armor
|
||||
License: FSFAP
|
||||
Source1: key.gpg
|
||||
Source2: dummy.tar.gz
|
||||
Source3: dummy.tar.gz.sig
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
This tests the most basic signature verification. There is no ASCII armor or
|
||||
other complications.
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyring='%{SOURCE1}' --data='%{SOURCE2}' --signature='%{SOURCE3}'
|
||||
echo 'Execution of prep continues.'
|
||||
|
||||
%changelog
|
||||
* Fri Jan 10 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
|
|
@ -1 +0,0 @@
|
|||
summary: gpgverify testcase, no ASCII armor
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1,21 +0,0 @@
|
|||
Name: gpgverify-test-wildcard
|
||||
Version: 1
|
||||
Release: 1
|
||||
Summary: gpgverify testcase, listing multiple keyrings
|
||||
License: FSFAP
|
||||
Source1: key-1.gpg
|
||||
Source2: key-2.gpg
|
||||
Source3: dummy.tar.gz
|
||||
Source4: dummy.tar.gz.sig
|
||||
BuildRequires: gpgverify
|
||||
|
||||
%description
|
||||
This tests passing multiple keyrings to gpgverify through wildcard expansion.
|
||||
|
||||
%prep
|
||||
%{gpgverify} --keyrings '%{_sourcedir}'/key-* --data='%{SOURCE3}' --signature='%{SOURCE4}'
|
||||
echo 'Execution of prep continues.'
|
||||
|
||||
%changelog
|
||||
* Sat Jan 11 2025 Björn Persson <Bjorn@Rombobjörn.se> - 1-1
|
||||
- created
|
||||
Binary file not shown.
Binary file not shown.
|
|
@ -1 +0,0 @@
|
|||
summary: gpgverify testcase, listing multiple keyrings
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
# Something in the testing machinery demands a "plan", and it must be kept
|
||||
# separate from the testcases, so here's a file that makes two defaults
|
||||
# explicit.
|
||||
|
||||
discover:
|
||||
how: fmf
|
||||
execute:
|
||||
how: tmt
|
||||
Loading…
Add table
Add a link
Reference in a new issue