|
@@ 174-196 (lines=23) @@
|
| 171 |
|
Verify::verify($this->event); |
| 172 |
|
} |
| 173 |
|
|
| 174 |
|
public function testWillRejectPackageSignedWithImportedButUnTrustedKey() : void |
| 175 |
|
{ |
| 176 |
|
$personalGpgDirectory = $this->makeGpgHomeDirectory(); |
| 177 |
|
$foreignGpgDirectory = $this->makeGpgHomeDirectory(); |
| 178 |
|
|
| 179 |
|
$this->makeKey($personalGpgDirectory, '[email protected]', 'Just Me'); |
| 180 |
|
|
| 181 |
|
$vendorName = 'Mr. Magoo'; |
| 182 |
|
$vendorEmail = '[email protected]'; |
| 183 |
|
$vendorKey = $this->makeKey($foreignGpgDirectory, $vendorEmail, $vendorName); |
| 184 |
|
$vendorDir = $this->makeVendorDirectory(); |
| 185 |
|
$vendor1 = $this->makeDependencyGitRepository($vendorDir, 'vendor1/package1', $vendorEmail, $vendorName); |
| 186 |
|
|
| 187 |
|
$this->signDependency($vendor1, $foreignGpgDirectory, $vendorKey); |
| 188 |
|
|
| 189 |
|
$this->importForeignKeys($personalGpgDirectory, $foreignGpgDirectory, $vendorKey, false); |
| 190 |
|
|
| 191 |
|
$this->configureCorrectComposerSetup(); |
| 192 |
|
|
| 193 |
|
putenv('GNUPGHOME=' . $personalGpgDirectory); |
| 194 |
|
|
| 195 |
|
$this->assertWillFailPackageVerification(); |
| 196 |
|
} |
| 197 |
|
|
| 198 |
|
public function testWillRejectPackageSignedWithImportedButUnTrustedKeyWithDifferentLocaleSettings() : void |
| 199 |
|
{ |
|
@@ 232-254 (lines=23) @@
|
| 229 |
|
self::fail('Exception was not thrown'); |
| 230 |
|
} |
| 231 |
|
|
| 232 |
|
public function testWillAcceptPackageSignedWithImportedAndTrustedKey() : void |
| 233 |
|
{ |
| 234 |
|
$personalGpgDirectory = $this->makeGpgHomeDirectory(); |
| 235 |
|
$foreignGpgDirectory = $this->makeGpgHomeDirectory(); |
| 236 |
|
|
| 237 |
|
$this->makeKey($personalGpgDirectory, '[email protected]', 'Just Me'); |
| 238 |
|
|
| 239 |
|
$vendorName = 'Mr. Magoo'; |
| 240 |
|
$vendorEmail = '[email protected]'; |
| 241 |
|
$vendorKey = $this->makeKey($foreignGpgDirectory, $vendorEmail, $vendorName); |
| 242 |
|
$vendorDir = $this->makeVendorDirectory(); |
| 243 |
|
$vendor1 = $this->makeDependencyGitRepository($vendorDir, 'vendor1/package1', $vendorEmail, $vendorName); |
| 244 |
|
|
| 245 |
|
$this->signDependency($vendor1, $foreignGpgDirectory, $vendorKey); |
| 246 |
|
|
| 247 |
|
$this->importForeignKeys($personalGpgDirectory, $foreignGpgDirectory, $vendorKey, true); |
| 248 |
|
|
| 249 |
|
$this->configureCorrectComposerSetup(); |
| 250 |
|
|
| 251 |
|
putenv('GNUPGHOME=' . $personalGpgDirectory); |
| 252 |
|
|
| 253 |
|
Verify::verify($this->event); |
| 254 |
|
} |
| 255 |
|
|
| 256 |
|
public function testWillRejectPackageTaggedAndSignedWithImportedButUnTrustedKey() : void |
| 257 |
|
{ |
|
@@ 256-278 (lines=23) @@
|
| 253 |
|
Verify::verify($this->event); |
| 254 |
|
} |
| 255 |
|
|
| 256 |
|
public function testWillRejectPackageTaggedAndSignedWithImportedButUnTrustedKey() : void |
| 257 |
|
{ |
| 258 |
|
$personalGpgDirectory = $this->makeGpgHomeDirectory(); |
| 259 |
|
$foreignGpgDirectory = $this->makeGpgHomeDirectory(); |
| 260 |
|
|
| 261 |
|
$this->makeKey($personalGpgDirectory, '[email protected]', 'Just Me'); |
| 262 |
|
|
| 263 |
|
$vendorName = 'Mr. Magoo'; |
| 264 |
|
$vendorEmail = '[email protected]'; |
| 265 |
|
$vendorKey = $this->makeKey($foreignGpgDirectory, $vendorEmail, $vendorName); |
| 266 |
|
$vendorDir = $this->makeVendorDirectory(); |
| 267 |
|
$vendor1 = $this->makeDependencyGitRepository($vendorDir, 'vendor1/package1', $vendorEmail, $vendorName); |
| 268 |
|
|
| 269 |
|
$this->createDependencySignedTag($vendor1, $foreignGpgDirectory, $vendorKey); |
| 270 |
|
|
| 271 |
|
$this->importForeignKeys($personalGpgDirectory, $foreignGpgDirectory, $vendorKey, false); |
| 272 |
|
|
| 273 |
|
$this->configureCorrectComposerSetup(); |
| 274 |
|
|
| 275 |
|
putenv('GNUPGHOME=' . $personalGpgDirectory); |
| 276 |
|
|
| 277 |
|
$this->assertWillFailPackageVerification(); |
| 278 |
|
} |
| 279 |
|
|
| 280 |
|
public function testWillAcceptPackageTaggedAndSignedWithImportedAndTrustedKey() : void |
| 281 |
|
{ |
|
@@ 280-302 (lines=23) @@
|
| 277 |
|
$this->assertWillFailPackageVerification(); |
| 278 |
|
} |
| 279 |
|
|
| 280 |
|
public function testWillAcceptPackageTaggedAndSignedWithImportedAndTrustedKey() : void |
| 281 |
|
{ |
| 282 |
|
$personalGpgDirectory = $this->makeGpgHomeDirectory(); |
| 283 |
|
$foreignGpgDirectory = $this->makeGpgHomeDirectory(); |
| 284 |
|
|
| 285 |
|
$this->makeKey($personalGpgDirectory, '[email protected]', 'Just Me'); |
| 286 |
|
|
| 287 |
|
$vendorName = 'Mr. Magoo'; |
| 288 |
|
$vendorEmail = '[email protected]'; |
| 289 |
|
$vendorKey = $this->makeKey($foreignGpgDirectory, $vendorEmail, $vendorName); |
| 290 |
|
$vendorDir = $this->makeVendorDirectory(); |
| 291 |
|
$vendor1 = $this->makeDependencyGitRepository($vendorDir, 'vendor1/package1', $vendorEmail, $vendorName); |
| 292 |
|
|
| 293 |
|
$this->createDependencySignedTag($vendor1, $foreignGpgDirectory, $vendorKey); |
| 294 |
|
|
| 295 |
|
$this->importForeignKeys($personalGpgDirectory, $foreignGpgDirectory, $vendorKey, true); |
| 296 |
|
|
| 297 |
|
$this->configureCorrectComposerSetup(); |
| 298 |
|
|
| 299 |
|
putenv('GNUPGHOME=' . $personalGpgDirectory); |
| 300 |
|
|
| 301 |
|
Verify::verify($this->event); |
| 302 |
|
} |
| 303 |
|
|
| 304 |
|
public function testWillAcceptSignedAndTrustedTaggedPackages() : void |
| 305 |
|
{ |
Roave /
composer-gpg-verify
