mirror of
https://github.com/arduino/Arduino.git
synced 2024-12-02 13:24:12 +01:00
987cad2633
If a core has a post/pre install/uninstall script, it will be execute at the appropriate time IF: 1) source (package_*_index) is trusted (GPG signed) 2) or users have explicitly added line "contributions.trust.all=true" to their preferences.txt Some minor refactor and clean up while I was at it
66 lines
2.8 KiB
Java
66 lines
2.8 KiB
Java
/*
|
|
* This file is part of Arduino.
|
|
*
|
|
* Copyright 2015 Arduino LLC (http://www.arduino.cc/)
|
|
*
|
|
* Arduino is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*
|
|
* As a special exception, you may use this file as part of a free software
|
|
* library without restriction. Specifically, if other files instantiate
|
|
* templates or use macros or inline functions from this file, or you compile
|
|
* this file and link it with other files to produce an executable, this
|
|
* file does not by itself cause the resulting executable to be covered by
|
|
* the GNU General Public License. This exception does not however
|
|
* invalidate any other reasons why the executable file might be covered by
|
|
* the GNU General Public License.
|
|
*/
|
|
|
|
package cc.arduino.contributions;
|
|
|
|
import org.junit.Before;
|
|
import org.junit.Test;
|
|
|
|
import java.io.File;
|
|
|
|
import static org.junit.Assert.assertFalse;
|
|
import static org.junit.Assert.assertTrue;
|
|
|
|
public class GPGDetachedSignatureVerifierTest {
|
|
|
|
private GPGDetachedSignatureVerifier GPGDetachedSignatureVerifier;
|
|
|
|
@Before
|
|
public void setUp() throws Exception {
|
|
GPGDetachedSignatureVerifier = new GPGDetachedSignatureVerifier();
|
|
}
|
|
|
|
@Test
|
|
public void testSignatureSuccessfulVerification() throws Exception {
|
|
File signedFile = new File(GPGDetachedSignatureVerifierTest.class.getResource("./package_index.json").getFile());
|
|
File sign = new File(GPGDetachedSignatureVerifierTest.class.getResource("./package_index.json.sig").getFile());
|
|
File publickKey = new File(GPGDetachedSignatureVerifierTest.class.getResource("./public.gpg.key").getFile());
|
|
assertTrue(GPGDetachedSignatureVerifier.verify(signedFile, sign, publickKey));
|
|
}
|
|
|
|
@Test
|
|
public void testSignatureFailingVerification() throws Exception {
|
|
File fakeSignedFile = File.createTempFile("fakeSigned", "txt");
|
|
fakeSignedFile.deleteOnExit();
|
|
File sign = new File(GPGDetachedSignatureVerifierTest.class.getResource("./package_index.json.sig").getFile());
|
|
File publickKey = new File(GPGDetachedSignatureVerifierTest.class.getResource("./public.gpg.key").getFile());
|
|
assertFalse(GPGDetachedSignatureVerifier.verify(fakeSignedFile, sign, publickKey));
|
|
}
|
|
}
|