Merge branch 'bw/protocol-v2'
[git/debian.git] / t / t7612-merge-verify-signatures.sh
blobe797c741124ef86eae0e3a8d6a5372b0a84c91e2
1 #!/bin/sh
3 test_description='merge signature verification tests'
4 . ./test-lib.sh
5 . "$TEST_DIRECTORY/lib-gpg.sh"
7 test_expect_success GPG 'create signed commits' '
8 echo 1 >file && git add file &&
9 test_tick && git commit -m initial &&
10 git tag initial &&
12 git checkout -b side-signed &&
13 echo 3 >elif && git add elif &&
14 test_tick && git commit -S -m "signed on side" &&
15 git checkout initial &&
17 git checkout -b side-unsigned &&
18 echo 3 >foo && git add foo &&
19 test_tick && git commit -m "unsigned on side" &&
20 git checkout initial &&
22 git checkout -b side-bad &&
23 echo 3 >bar && git add bar &&
24 test_tick && git commit -S -m "bad on side" &&
25 git cat-file commit side-bad >raw &&
26 sed -e "s/bad/forged bad/" raw >forged &&
27 git hash-object -w -t commit forged >forged.commit &&
28 git checkout initial &&
30 git checkout -b side-untrusted &&
31 echo 3 >baz && git add baz &&
32 test_tick && git commit -SB7227189 -m "untrusted on side" &&
34 git checkout master
37 test_expect_success GPG 'merge unsigned commit with verification' '
38 test_when_finished "git reset --hard && git checkout initial" &&
39 test_must_fail git merge --ff-only --verify-signatures side-unsigned 2>mergeerror &&
40 test_i18ngrep "does not have a GPG signature" mergeerror
43 test_expect_success GPG 'merge unsigned commit with merge.verifySignatures=true' '
44 test_when_finished "git reset --hard && git checkout initial" &&
45 test_config merge.verifySignatures true &&
46 test_must_fail git merge --ff-only side-unsigned 2>mergeerror &&
47 test_i18ngrep "does not have a GPG signature" mergeerror
50 test_expect_success GPG 'merge commit with bad signature with verification' '
51 test_when_finished "git reset --hard && git checkout initial" &&
52 test_must_fail git merge --ff-only --verify-signatures $(cat forged.commit) 2>mergeerror &&
53 test_i18ngrep "has a bad GPG signature" mergeerror
56 test_expect_success GPG 'merge commit with bad signature with merge.verifySignatures=true' '
57 test_when_finished "git reset --hard && git checkout initial" &&
58 test_config merge.verifySignatures true &&
59 test_must_fail git merge --ff-only $(cat forged.commit) 2>mergeerror &&
60 test_i18ngrep "has a bad GPG signature" mergeerror
63 test_expect_success GPG 'merge commit with untrusted signature with verification' '
64 test_when_finished "git reset --hard && git checkout initial" &&
65 test_must_fail git merge --ff-only --verify-signatures side-untrusted 2>mergeerror &&
66 test_i18ngrep "has an untrusted GPG signature" mergeerror
69 test_expect_success GPG 'merge commit with untrusted signature with merge.verifySignatures=true' '
70 test_when_finished "git reset --hard && git checkout initial" &&
71 test_config merge.verifySignatures true &&
72 test_must_fail git merge --ff-only side-untrusted 2>mergeerror &&
73 test_i18ngrep "has an untrusted GPG signature" mergeerror
76 test_expect_success GPG 'merge signed commit with verification' '
77 test_when_finished "git reset --hard && git checkout initial" &&
78 git merge --verbose --ff-only --verify-signatures side-signed >mergeoutput &&
79 test_i18ngrep "has a good GPG signature" mergeoutput
82 test_expect_success GPG 'merge signed commit with merge.verifySignatures=true' '
83 test_when_finished "git reset --hard && git checkout initial" &&
84 test_config merge.verifySignatures true &&
85 git merge --verbose --ff-only side-signed >mergeoutput &&
86 test_i18ngrep "has a good GPG signature" mergeoutput
89 test_expect_success GPG 'merge commit with bad signature without verification' '
90 test_when_finished "git reset --hard && git checkout initial" &&
91 git merge $(cat forged.commit)
94 test_expect_success GPG 'merge commit with bad signature with merge.verifySignatures=false' '
95 test_when_finished "git reset --hard && git checkout initial" &&
96 test_config merge.verifySignatures false &&
97 git merge $(cat forged.commit)
100 test_expect_success GPG 'merge commit with bad signature with merge.verifySignatures=true and --no-verify-signatures' '
101 test_when_finished "git reset --hard && git checkout initial" &&
102 test_config merge.verifySignatures true &&
103 git merge --no-verify-signatures $(cat forged.commit)
106 test_done