tests: increase the verbosity of the GPG-related prereqs
[git] / t / lib-gpg.sh
1 # We always set GNUPGHOME, even if no usable GPG was found, as
2 #
3 # - It does not hurt, and
4 #
5 # - we cannot set global environment variables in lazy prereqs because they are
6 #   executed in an eval'ed subshell that changes the working directory to a
7 #   temporary one.
8
9 GNUPGHOME="$PWD/gpghome"
10 export GNUPGHOME
11
12 test_lazy_prereq GPG '
13         gpg_version=$(gpg --version 2>&1)
14         test $? != 127 || exit 1
15
16         # As said here: http://www.gnupg.org/documentation/faqs.html#q6.19
17         # the gpg version 1.0.6 did not parse trust packets correctly, so for
18         # that version, creation of signed tags using the generated key fails.
19         case "$gpg_version" in
20         "gpg (GnuPG) 1.0.6"*)
21                 say "Your version of gpg (1.0.6) is too buggy for testing"
22                 exit 1
23                 ;;
24         *)
25                 # Available key info:
26                 # * Type DSA and Elgamal, size 2048 bits, no expiration date,
27                 #   name and email: C O Mitter <committer@example.com>
28                 # * Type RSA, size 2048 bits, no expiration date,
29                 #   name and email: Eris Discordia <discord@example.net>
30                 # No password given, to enable non-interactive operation.
31                 # To generate new key:
32                 #       gpg --homedir /tmp/gpghome --gen-key
33                 # To write armored exported key to keyring:
34                 #       gpg --homedir /tmp/gpghome --export-secret-keys \
35                 #               --armor 0xDEADBEEF >> lib-gpg/keyring.gpg
36                 #       gpg --homedir /tmp/gpghome --export \
37                 #               --armor 0xDEADBEEF >> lib-gpg/keyring.gpg
38                 # To export ownertrust:
39                 #       gpg --homedir /tmp/gpghome --export-ownertrust \
40                 #               > lib-gpg/ownertrust
41                 mkdir "$GNUPGHOME" &&
42                 chmod 0700 "$GNUPGHOME" &&
43                 (gpgconf --kill gpg-agent || : ) &&
44                 gpg --homedir "${GNUPGHOME}" --import \
45                         "$TEST_DIRECTORY"/lib-gpg/keyring.gpg &&
46                 gpg --homedir "${GNUPGHOME}" --import-ownertrust \
47                         "$TEST_DIRECTORY"/lib-gpg/ownertrust &&
48                 gpg --homedir "${GNUPGHOME}" </dev/null >/dev/null \
49                         --sign -u committer@example.com
50                 ;;
51         esac
52 '
53
54 test_lazy_prereq GPGSM '
55         test_have_prereq GPG &&
56         # Available key info:
57         # * see t/lib-gpg/gpgsm-gen-key.in
58         # To generate new certificate:
59         #  * no passphrase
60         #       gpgsm --homedir /tmp/gpghome/ \
61         #               -o /tmp/gpgsm.crt.user \
62         #               --generate-key \
63         #               --batch t/lib-gpg/gpgsm-gen-key.in
64         # To import certificate:
65         #       gpgsm --homedir /tmp/gpghome/ \
66         #               --import /tmp/gpgsm.crt.user
67         # To export into a .p12 we can later import:
68         #       gpgsm --homedir /tmp/gpghome/ \
69         #               -o t/lib-gpg/gpgsm_cert.p12 \
70         #               --export-secret-key-p12 "committer@example.com"
71         echo | gpgsm --homedir "${GNUPGHOME}" \
72                 --passphrase-fd 0 --pinentry-mode loopback \
73                 --import "$TEST_DIRECTORY"/lib-gpg/gpgsm_cert.p12 &&
74
75         gpgsm --homedir "${GNUPGHOME}" -K |
76         grep fingerprint: |
77         cut -d" " -f4 |
78         tr -d "\\n" >"${GNUPGHOME}/trustlist.txt" &&
79
80         echo " S relax" >>"${GNUPGHOME}/trustlist.txt" &&
81         echo hello | gpgsm --homedir "${GNUPGHOME}" >/dev/null \
82                -u committer@example.com -o /dev/null --sign -
83 '
84
85 test_lazy_prereq RFC1991 '
86         test_have_prereq GPG &&
87         echo | gpg --homedir "${GNUPGHOME}" -b --rfc1991 >/dev/null
88 '
89
90 sanitize_pgp() {
91         perl -ne '
92                 /^-----END PGP/ and $in_pgp = 0;
93                 print unless $in_pgp;
94                 /^-----BEGIN PGP/ and $in_pgp = 1;
95         '
96 }