public
/
keyfork
5
0
Fork 0
Code Issues 29 Pull Requests 2 Packages Projects Releases Wiki Activity

keyfork-tests: update to use --to-stdout, use keyforkd properly

This commit is contained in:
Ryan Heywood 2025-08-21 05:45:09 -04:00
parent 8838d4d26f
commit 5ad48e716e
Signed by: ryan
GPG Key ID: 8E401478A3FBEF72
1 changed files with 42 additions and 37 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

79
crates/tests/src/keyfork/derive/openpgp.rs
View File

@ -7,50 +7,55 @@ use openpgp::{
types::KeyFlags, types::KeyFlags,
Cert, Cert,
}; };
use keyforkd::test_util::{run_test, Panicable};
const KEYFORK_BIN: &str = "keyfork"; const KEYFORK_BIN: &str = "keyfork";
#[test] #[test]
fn test() { fn test() {
let policy = StandardPolicy::new(); run_test(b"AAAA", |_| {
let policy = StandardPolicy::new();
let command_output = Command::cargo_bin(KEYFORK_BIN)
.unwrap()
.args([
"derive",
"openpgp",
"--to-stdout",
"Ryan Heywood (RyanSquared) <ryan@distrust.co>",
])
.assert()
.success();
let command_output = Command::cargo_bin(KEYFORK_BIN) let packets = PacketParser::from_bytes(&command_output.get_output().stdout).unwrap();
.unwrap() let cert = Cert::try_from(packets).unwrap();
.args([
"derive",
"openpgp",
"Ryan Heywood (RyanSquared) <ryan@distrust.co>",
])
.assert()
.success();
let packets = PacketParser::from_bytes(&command_output.get_output().stdout).unwrap(); // assert the cert contains _any_ secret key data
let cert = Cert::try_from(packets).unwrap();
// assert the cert contains _any_ secret key data
assert!(
cert.is_tsk(),
"exported key should contain secret key data, indicated by the key being a TSK"
);
// assert the correct keys were added in the correct order
let mut key_formats = std::collections::HashSet::from([
KeyFlags::empty().set_certification(),
KeyFlags::empty().set_signing(),
KeyFlags::empty()
.set_transport_encryption()
.set_storage_encryption(),
KeyFlags::empty().set_authentication(),
]);
let valid_cert = cert.with_policy(&policy, None).unwrap();
for key in valid_cert.keys() {
let flags = key.key_flags().unwrap();
assert!( assert!(
key_formats.remove(&flags), cert.is_tsk(),
"could not find key flag set: {flags:?}" "exported key should contain secret key data, indicated by the key being a TSK"
); );
key.alive().expect("is live after being generated");
key.parts_into_secret().expect("has secret keys"); // assert the correct keys were added in the correct order
} let mut key_formats = std::collections::HashSet::from([
assert!(key_formats.is_empty(), "remaining key formats: {key_formats:?}"); KeyFlags::empty().set_certification(),
KeyFlags::empty().set_signing(),
KeyFlags::empty()
.set_transport_encryption()
.set_storage_encryption(),
KeyFlags::empty().set_authentication(),
]);
let valid_cert = cert.with_policy(&policy, None).unwrap();
for key in valid_cert.keys() {
let flags = key.key_flags().unwrap();
assert!(
key_formats.remove(&flags),
"could not find key flag set: {flags:?}"
);
key.alive().expect("is live after being generated");
key.parts_into_secret().expect("has secret keys");
}
assert!(key_formats.is_empty(), "remaining key formats: {key_formats:?}");
Panicable::Ok(())
}).unwrap();
} }