1 #!/bin/sh
2 #
3 # Copyright (c) 2019 Stefan Sperling <stsp@openbsd.org>
4 #
5 # Permission to use, copy, modify, and distribute this software for any
6 # purpose with or without fee is hereby granted, provided that the above
7 # copyright notice and this permission notice appear in all copies.
8 #
9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16 
17 . ./common.sh
18 
19 test_tag_create() {
20 	local testroot=`test_init tag_create`
21 	local commit_id=`git_show_head $testroot/repo`
22 	local tag=1.0.0
23 	local tag2=2.0.0
24 
25 	# Create a tag based on repository's HEAD reference
26 	got tag -m 'test' -r $testroot/repo -c HEAD $tag > $testroot/stdout
27 	ret=$?
28 	if [ $ret -ne 0 ]; then
29 		echo "got ref command failed unexpectedly"
30 		test_done "$testroot" "$ret"
31 		return 1
32 	fi
33 
34 	tag_id=`got ref -r $testroot/repo -l \
35 		| grep "^refs/tags/$tag" | tr -d ' ' | cut -d: -f2`
36 	echo "Created tag $tag_id" > $testroot/stdout.expected
37 	cmp -s $testroot/stdout $testroot/stdout.expected
38 	ret=$?
39 	if [ $ret -ne 0 ]; then
40 		diff -u $testroot/stdout.expected $testroot/stdout
41 		test_done "$testroot" "$ret"
42 		return 1
43 	fi
44 
45 	# Ensure that Git recognizes the tag Got has created
46 	(cd $testroot/repo && git checkout -q $tag)
47 	ret=$?
48 	if [ $ret -ne 0 ]; then
49 		echo "git checkout command failed unexpectedly"
50 		test_done "$testroot" "$ret"
51 		return 1
52 	fi
53 
54 	# Ensure Got recognizes the new tag
55 	got checkout -c $tag $testroot/repo $testroot/wt >/dev/null
56 	ret=$?
57 	if [ $ret -ne 0 ]; then
58 		echo "got checkout command failed unexpectedly"
59 		test_done "$testroot" "$ret"
60 		return 1
61 	fi
62 
63 	# Create a tag based on implied worktree HEAD ref
64 	(cd $testroot/wt && got tag -m 'test' $tag2 > $testroot/stdout)
65 	ret=$?
66 	if [ $ret -ne 0 ]; then
67 		test_done "$testroot" "$ret"
68 		return 1
69 	fi
70 
71 	tag_id2=`got ref -r $testroot/repo -l \
72 		| grep "^refs/tags/$tag2" | tr -d ' ' | cut -d: -f2`
73 	echo "Created tag $tag_id2" > $testroot/stdout.expected
74 	cmp -s $testroot/stdout $testroot/stdout.expected
75 	ret=$?
76 	if [ $ret -ne 0 ]; then
77 		diff -u $testroot/stdout.expected $testroot/stdout
78 		test_done "$testroot" "$ret"
79 		return 1
80 	fi
81 
82 	(cd $testroot/repo && git checkout -q $tag2)
83 	ret=$?
84 	if [ $ret -ne 0 ]; then
85 		echo "git checkout command failed unexpectedly"
86 		test_done "$testroot" "$ret"
87 		return 1
88 	fi
89 
90 	# Attempt to create a tag pointing at a non-commit
91 	local tree_id=`git_show_tree $testroot/repo`
92 	(cd $testroot/wt && got tag -m 'test' -c $tree_id foobar \
93 		2> $testroot/stderr)
94 	ret=$?
95 	if [ $ret -eq 0 ]; then
96 		echo "git tag command succeeded unexpectedly"
97 		test_done "$testroot" "1"
98 		return 1
99 	fi
100 
101 	echo "got: commit $tree_id: object not found" \
102 		> $testroot/stderr.expected
103 	cmp -s $testroot/stderr $testroot/stderr.expected
104 	ret=$?
105 	if [ $ret -ne 0 ]; then
106 		diff -u $testroot/stderr.expected $testroot/stderr
107 		test_done "$testroot" "$ret"
108 		return 1
109 	fi
110 
111 	got ref -r $testroot/repo -l > $testroot/stdout
112 	echo "HEAD: $commit_id" > $testroot/stdout.expected
113 	echo -n "refs/got/worktree/base-" >> $testroot/stdout.expected
114 	cat $testroot/wt/.got/uuid | tr -d '\n' >> $testroot/stdout.expected
115 	echo ": $commit_id" >> $testroot/stdout.expected
116 	echo "refs/heads/master: $commit_id" >> $testroot/stdout.expected
117 	echo "refs/tags/$tag: $tag_id" >> $testroot/stdout.expected
118 	echo "refs/tags/$tag2: $tag_id2" >> $testroot/stdout.expected
119 	cmp -s $testroot/stdout $testroot/stdout.expected
120 	ret=$?
121 	if [ $ret -ne 0 ]; then
122 		diff -u $testroot/stdout.expected $testroot/stdout
123 	fi
124 	test_done "$testroot" "$ret"
125 }
126 
127 test_tag_list() {
128 	local testroot=`test_init tag_list`
129 	local commit_id=`git_show_head $testroot/repo`
130 	local tag=1.0.0
131 	local tag2=2.0.0
132 
133 	# create tag with Git
134 	(cd $testroot/repo && git tag -a -m 'test' $tag)
135 	# create tag with Got
136 	(cd $testroot/repo && got tag -m 'test' $tag2 > /dev/null)
137 
138 	tag_id=`got ref -r $testroot/repo -l \
139 		| grep "^refs/tags/$tag" | tr -d ' ' | cut -d: -f2`
140 	local tagger_time=`git_show_tagger_time $testroot/repo $tag`
141 	d1=`date -u -r $tagger_time +"%a %b %e %X %Y UTC"`
142 	tag_id2=`got ref -r $testroot/repo -l \
143 		| grep "^refs/tags/$tag2" | tr -d ' ' | cut -d: -f2`
144 	local tagger_time2=`git_show_tagger_time $testroot/repo $tag2`
145 	d2=`date -u -r $tagger_time2 +"%a %b %e %X %Y UTC"`
146 
147 	got tag -r $testroot/repo -l > $testroot/stdout
148 
149 	echo "-----------------------------------------------" \
150 		> $testroot/stdout.expected
151 	echo "tag $tag2 $tag_id2" >> $testroot/stdout.expected
152 	echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
153 	echo "date: $d2" >> $testroot/stdout.expected
154 	echo "object: commit $commit_id" >> $testroot/stdout.expected
155 	echo " " >> $testroot/stdout.expected
156 	echo " test" >> $testroot/stdout.expected
157 	echo " " >> $testroot/stdout.expected
158 	echo "-----------------------------------------------" \
159 		>> $testroot/stdout.expected
160 	echo "tag $tag $tag_id" >> $testroot/stdout.expected
161 	echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
162 	echo "date: $d1" >> $testroot/stdout.expected
163 	echo "object: commit $commit_id" >> $testroot/stdout.expected
164 	echo " " >> $testroot/stdout.expected
165 	echo " test" >> $testroot/stdout.expected
166 	echo " " >> $testroot/stdout.expected
167 	cmp -s $testroot/stdout $testroot/stdout.expected
168 	ret=$?
169 	if [ $ret -ne 0 ]; then
170 		diff -u $testroot/stdout.expected $testroot/stdout
171 		test_done "$testroot" "$ret"
172 		return 1
173 	fi
174 
175 	got tag -r $testroot/repo -l $tag > $testroot/stdout
176 
177 	echo "-----------------------------------------------" \
178 		> $testroot/stdout.expected
179 	echo "tag $tag $tag_id" >> $testroot/stdout.expected
180 	echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
181 	echo "date: $d1" >> $testroot/stdout.expected
182 	echo "object: commit $commit_id" >> $testroot/stdout.expected
183 	echo " " >> $testroot/stdout.expected
184 	echo " test" >> $testroot/stdout.expected
185 	echo " " >> $testroot/stdout.expected
186 	cmp -s $testroot/stdout $testroot/stdout.expected
187 	ret=$?
188 	if [ $ret -ne 0 ]; then
189 		diff -u $testroot/stdout.expected $testroot/stdout
190 		test_done "$testroot" "$ret"
191 		return 1
192 	fi
193 
194 	got tag -r $testroot/repo -l $tag2 > $testroot/stdout
195 
196 	echo "-----------------------------------------------" \
197 		> $testroot/stdout.expected
198 	echo "tag $tag2 $tag_id2" >> $testroot/stdout.expected
199 	echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
200 	echo "date: $d2" >> $testroot/stdout.expected
201 	echo "object: commit $commit_id" >> $testroot/stdout.expected
202 	echo " " >> $testroot/stdout.expected
203 	echo " test" >> $testroot/stdout.expected
204 	echo " " >> $testroot/stdout.expected
205 	cmp -s $testroot/stdout $testroot/stdout.expected
206 	ret=$?
207 	if [ $ret -ne 0 ]; then
208 		diff -u $testroot/stdout.expected $testroot/stdout
209 	fi
210 	test_done "$testroot" "$ret"
211 }
212 
213 test_tag_list_lightweight() {
214 	local testroot=`test_init tag_list_lightweight`
215 	local commit_id=`git_show_head $testroot/repo`
216 	local tag=1.0.0
217 	local tag2=2.0.0
218 
219 	# create "lightweight" tag with Git
220 	(cd $testroot/repo && git tag $tag)
221 	(cd $testroot/repo && git tag $tag2)
222 
223 	tag_id=`got ref -r $testroot/repo -l \
224 		| grep "^refs/tags/$tag" | tr -d ' ' | cut -d: -f2`
225 	local tagger_time=`git_show_author_time $testroot/repo $tag`
226 	d1=`date -u -r $tagger_time +"%a %b %e %X %Y UTC"`
227 	tag_id2=`got ref -r $testroot/repo -l \
228 		| grep "^refs/tags/$tag2" | tr -d ' ' | cut -d: -f2`
229 	local tagger_time2=`git_show_author_time $testroot/repo $tag2`
230 	d2=`date -u -r $tagger_time2 +"%a %b %e %X %Y UTC"`
231 
232 	got tag -r $testroot/repo -l > $testroot/stdout
233 
234 	echo "-----------------------------------------------" \
235 		> $testroot/stdout.expected
236 	echo "tag $tag2 $tag_id2" >> $testroot/stdout.expected
237 	echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
238 	echo "date: $d2" >> $testroot/stdout.expected
239 	echo "object: commit $commit_id" >> $testroot/stdout.expected
240 	echo " " >> $testroot/stdout.expected
241 	echo " adding the test tree" >> $testroot/stdout.expected
242 	echo " " >> $testroot/stdout.expected
243 	echo "-----------------------------------------------" \
244 		>> $testroot/stdout.expected
245 	echo "tag $tag $tag_id" >> $testroot/stdout.expected
246 	echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
247 	echo "date: $d1" >> $testroot/stdout.expected
248 	echo "object: commit $commit_id" >> $testroot/stdout.expected
249 	echo " " >> $testroot/stdout.expected
250 	echo " adding the test tree" >> $testroot/stdout.expected
251 	echo " " >> $testroot/stdout.expected
252 	cmp -s $testroot/stdout $testroot/stdout.expected
253 	ret=$?
254 	if [ $ret -ne 0 ]; then
255 		diff -u $testroot/stdout.expected $testroot/stdout
256 	fi
257 	test_done "$testroot" "$ret"
258 }
259 
260 test_tag_create_ssh_signed() {
261 	local testroot=`test_init tag_create`
262 	local commit_id=`git_show_head $testroot/repo`
263 	local tag=1.0.0
264 	local tag2=2.0.0
265 
266 	ssh-keygen -q -N '' -t ed25519 -f $testroot/id_ed25519
267 	ret=$?
268 	if [ $ret -ne 0 ]; then
269 		echo "ssh-keygen failed unexpectedly"
270 		test_done "$testroot" "$ret"
271 		return 1
272 	fi
273 	touch $testroot/allowed_signers
274 	touch $testroot/revoked_signers
275 	echo "allowed_signers \"$testroot/allowed_signers\"" >> \
276 		$testroot/repo/.git/got.conf
277 	echo "revoked_signers \"$testroot/revoked_signers\"" >> \
278 		$testroot/repo/.git/got.conf
279 
280 	# Create a signed tag based on repository's HEAD reference
281 	got tag -s $testroot/id_ed25519 -m 'test' -r $testroot/repo -c HEAD \
282 		$tag > $testroot/stdout
283 	ret=$?
284 	if [ $ret -ne 0 ]; then
285 		echo "got tag command failed unexpectedly"
286 		test_done "$testroot" "$ret"
287 		return 1
288 	fi
289 
290 	tag_id=`got ref -r $testroot/repo -l \
291 		| grep "^refs/tags/$tag" | tr -d ' ' | cut -d: -f2`
292 	echo "Created tag $tag_id" > $testroot/stdout.expected
293 	cmp -s $testroot/stdout $testroot/stdout.expected
294 	ret=$?
295 	if [ $ret -ne 0 ]; then
296 		diff -u $testroot/stdout.expected $testroot/stdout
297 		test_done "$testroot" "$ret"
298 		return 1
299 	fi
300 
301 	# Ensure validation fails when the key is not allowed
302 	echo "signature: Could not verify signature." > \
303 		$testroot/stdout.expected
304 	VERIFY_STDOUT=$(got tag -r $testroot/repo -V $tag 2> $testroot/stderr)
305 	ret=$?
306 	echo "$VERIFY_STDOUT" | grep '^signature: ' > $testroot/stdout
307 	if [ $ret -eq 0 ]; then
308 		diff -u $testroot/stdout.expected $testroot/stdout
309 		test_done "$testroot" "1"
310 		return 1
311 	fi
312 
313 	GOOD_SIG='Good "git" signature for flan_hacker@openbsd.org with ED25519 key '
314 
315 	# Validate the signature with the key allowed
316 	echo -n 'flan_hacker@openbsd.org ' > $testroot/allowed_signers
317 	cat $testroot/id_ed25519.pub >> $testroot/allowed_signers
318 	GOT_STDOUT=$(got tag -r $testroot/repo -V $tag 2> $testroot/stderr)
319 	ret=$?
320 	if [ $ret -ne 0 ]; then
321 		echo "got tag command failed unexpectedly"
322 		diff -u $testroot/stdout.expected $testroot/stdout
323 		test_done "$testroot" "$ret"
324 		return 1
325 	fi
326 
327 	if ! echo "$GOT_STDOUT" | grep -q "^signature: $GOOD_SIG"; then
328 		echo "got tag command failed to validate signature"
329 		test_done "$testroot" "1"
330 		return 1
331 	fi
332 
333 	# Ensure validation fails after revoking the key
334 	ssh-keygen -y -f $testroot/id_ed25519 >> $testroot/revoked_signers
335 	echo "signature: Could not verify signature." > \
336 		$testroot/stdout.expected
337 	VERIFY_STDOUT=$(got tag -r $testroot/repo -V $tag 2> $testroot/stderr)
338 	ret=$?
339 	echo "$VERIFY_STDOUT" | grep '^signature: ' > $testroot/stdout
340 	if [ $ret -eq 0 ]; then
341 		diff -u $testroot/stdout.expected $testroot/stdout
342 		test_done "$testroot" "1"
343 		return 1
344 	fi
345 
346 	# Later tests expect validation to work
347 	echo -n > $testroot/revoked_signers
348 
349 	# Ensure that Git recognizes and verifies the tag Got has created
350 	(cd $testroot/repo && git checkout -q $tag)
351 	ret=$?
352 	if [ $ret -ne 0 ]; then
353 		echo "git checkout command failed unexpectedly"
354 		test_done "$testroot" "$ret"
355 		return 1
356 	fi
357 	(cd $testroot/repo && git config --local gpg.ssh.allowedSignersFile \
358 		$testroot/allowed_signers)
359 	GIT_STDERR=$(cd $testroot/repo && git tag -v $tag 2>&1 1>/dev/null)
360 	if ! echo "$GIT_STDERR" | grep -q "^$GOOD_SIG"; then
361 		echo "git tag command failed to validate signature"
362 		test_done "$testroot" "1"
363 		return 1
364 	fi
365 
366 	# Ensure Got recognizes the new tag
367 	got checkout -c $tag $testroot/repo $testroot/wt >/dev/null
368 	ret=$?
369 	if [ $ret -ne 0 ]; then
370 		echo "got checkout command failed unexpectedly"
371 		test_done "$testroot" "$ret"
372 		return 1
373 	fi
374 
375 	# Create another signed tag with a SHA1 commit ID
376 	got tag -s $testroot/id_ed25519 -m 'test' -r $testroot/repo \
377 		-c $commit_id $tag2 > $testroot/stdout
378 
379 	# got tag -V behaves like got tag -l, but with verification enabled.
380 	got tag -l -r $testroot/repo > $testroot/stdout.list
381 	got tag -V -r $testroot/repo > $testroot/stdout.verify
382 	diff -U0 $testroot/stdout.list $testroot/stdout.verify |
383 	    sed -e '/^--- /d' -e '/^+++ /d' > $testroot/stdout
384 	echo "@@ -5,0 +6 @@" > $testroot/stdout.expected
385 	echo -n "+signature: $GOOD_SIG" >> $testroot/stdout.expected
386 	ssh-keygen -l -f $testroot/id_ed25519.pub | cut -d' ' -f 2 \
387 		>> $testroot/stdout.expected
388 	echo "@@ -19,0 +21 @@" >> $testroot/stdout.expected
389 	echo -n "+signature: $GOOD_SIG" >> $testroot/stdout.expected
390 	ssh-keygen -l -f $testroot/id_ed25519.pub | cut -d' ' -f 2 \
391 		>> $testroot/stdout.expected
392 	cmp -s $testroot/stdout $testroot/stdout.expected
393 	ret=$?
394 	if [ $ret -ne 0 ]; then
395 		diff -u $testroot/stdout.expected $testroot/stdout
396 	fi
397 	test_done "$testroot" "$ret"
398 }
399 
400 test_tag_create_ssh_signed_missing_key() {
401 	local testroot=`test_init tag_create`
402 	local commit_id=`git_show_head $testroot/repo`
403 	local tag=1.0.0
404 
405 	# Fail to create a signed tag due to a missing SSH key
406 	got tag -s $testroot/bogus -m 'test' -r $testroot/repo \
407 		-c HEAD	$tag > $testroot/stdout 2> $testroot/stderr
408 	ret=$?
409 	if [ $ret -eq 0 ]; then
410 		echo "got tag command succeeded unexpectedly"
411 		test_done "$testroot" 1
412 		return 1
413 	fi
414 
415 	got ref -r $testroot/repo -l > $testroot/stdout
416 	echo "HEAD: refs/heads/master" > $testroot/stdout.expected
417 	echo "refs/heads/master: $commit_id" >> $testroot/stdout.expected
418 	cmp -s $testroot/stdout $testroot/stdout.expected
419 	ret=$?
420 	if [ $ret -ne 0 ]; then
421 		diff -u $testroot/stdout.expected $testroot/stdout
422 		test_done "$testroot" "$ret"
423 		return 1
424 	fi
425 	printf "Couldn't load public key $testroot/bogus: " \
426 		>> $testroot/stderr.expected
427 	printf "No such file or directory\r\n" >> $testroot/stderr.expected
428 	echo "got: unable to sign tag" >> $testroot/stderr.expected
429 	cmp -s $testroot/stderr $testroot/stderr.expected
430 	ret=$?
431 	if [ $ret -ne 0 ]; then
432 		diff -u $testroot/stderr.expected $testroot/stderr
433 	fi
434 	test_done "$testroot" "$ret"
435 }
436 
437 test_parseargs "$@"
438 run_test test_tag_create
439 run_test test_tag_list
440 run_test test_tag_list_lightweight
441 run_test test_tag_create_ssh_signed
442 run_test test_tag_create_ssh_signed_missing_key