1 #!/bin/sh
2 #
3 # Copyright (c) 2019 Stefan Sperling <stsp@openbsd.org>
4 #
5 # Permission to use, copy, modify, and distribute this software for any
6 # purpose with or without fee is hereby granted, provided that the above
7 # copyright notice and this permission notice appear in all copies.
8 #
9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16 
17 . ./common.sh
18 
19 test_tag_create() {
20 	local testroot=`test_init tag_create`
21 	local commit_id=`git_show_head $testroot/repo`
22 	local tag=1.0.0
23 	local tag2=2.0.0
24 
25 	# Create a tag based on repository's HEAD reference
26 	got tag -m 'test' -r $testroot/repo -c HEAD $tag > $testroot/stdout
27 	ret=$?
28 	if [ $ret -ne 0 ]; then
29 		echo "got ref command failed unexpectedly"
30 		test_done "$testroot" "$ret"
31 		return 1
32 	fi
33 
34 	tag_id=`got ref -r $testroot/repo -l \
35 		| grep "^refs/tags/$tag" | tr -d ' ' | cut -d: -f2`
36 	echo "Created tag $tag_id" > $testroot/stdout.expected
37 	cmp -s $testroot/stdout $testroot/stdout.expected
38 	ret=$?
39 	if [ $ret -ne 0 ]; then
40 		diff -u $testroot/stdout.expected $testroot/stdout
41 		test_done "$testroot" "$ret"
42 		return 1
43 	fi
44 
45 	# Ensure that Git recognizes the tag Got has created
46 	(cd $testroot/repo && git checkout -q $tag)
47 	ret=$?
48 	if [ $ret -ne 0 ]; then
49 		echo "git checkout command failed unexpectedly"
50 		test_done "$testroot" "$ret"
51 		return 1
52 	fi
53 
54 	# Ensure Got recognizes the new tag
55 	got checkout -c $tag $testroot/repo $testroot/wt >/dev/null
56 	ret=$?
57 	if [ $ret -ne 0 ]; then
58 		echo "got checkout command failed unexpectedly"
59 		test_done "$testroot" "$ret"
60 		return 1
61 	fi
62 
63 	# Create a tag based on implied worktree HEAD ref
64 	(cd $testroot/wt && got branch foo > /dev/null)
65 	echo 'foo' >> $testroot/wt/alpha
66 	(cd $testroot/wt && got commit -m foo > /dev/null)
67 	local commit_id2=`git_show_branch_head $testroot/repo foo`
68 	(cd $testroot/wt && got tag -m 'test' $tag2 > $testroot/stdout)
69 	ret=$?
70 	if [ $ret -ne 0 ]; then
71 		test_done "$testroot" "$ret"
72 		return 1
73 	fi
74 
75 	tag_id2=`got ref -r $testroot/repo -l \
76 		| grep "^refs/tags/$tag2" | tr -d ' ' | cut -d: -f2`
77 	echo "Created tag $tag_id2" > $testroot/stdout.expected
78 	cmp -s $testroot/stdout $testroot/stdout.expected
79 	ret=$?
80 	if [ $ret -ne 0 ]; then
81 		diff -u $testroot/stdout.expected $testroot/stdout
82 		test_done "$testroot" "$ret"
83 		return 1
84 	fi
85 
86 	tagged_commit=`got cat -r $testroot/repo $tag2 | grep ^object \
87 		| cut -d' ' -f2`
88 	if [ "$tagged_commit" != "$commit_id2" ]; then
89 		echo "wrong commit was tagged" >&2
90 		test_done "$testroot" "1"
91 		return 1
92 	fi
93 
94 	(cd $testroot/repo && git checkout -q $tag2)
95 	ret=$?
96 	if [ $ret -ne 0 ]; then
97 		echo "git checkout command failed unexpectedly"
98 		test_done "$testroot" "$ret"
99 		return 1
100 	fi
101 
102 	# Attempt to create a tag pointing at a non-commit
103 	local tree_id=`git_show_tree $testroot/repo`
104 	(cd $testroot/wt && got tag -m 'test' -c $tree_id foobar \
105 		2> $testroot/stderr)
106 	ret=$?
107 	if [ $ret -eq 0 ]; then
108 		echo "got tag command succeeded unexpectedly"
109 		test_done "$testroot" "1"
110 		return 1
111 	fi
112 
113 	echo "got: commit $tree_id: object not found" \
114 		> $testroot/stderr.expected
115 	cmp -s $testroot/stderr $testroot/stderr.expected
116 	ret=$?
117 	if [ $ret -ne 0 ]; then
118 		diff -u $testroot/stderr.expected $testroot/stderr
119 		test_done "$testroot" "$ret"
120 		return 1
121 	fi
122 
123 	got ref -r $testroot/repo -l > $testroot/stdout
124 	echo "HEAD: $commit_id2" > $testroot/stdout.expected
125 	echo -n "refs/got/worktree/base-" >> $testroot/stdout.expected
126 	cat $testroot/wt/.got/uuid | tr -d '\n' >> $testroot/stdout.expected
127 	echo ": $commit_id2" >> $testroot/stdout.expected
128 	echo "refs/heads/foo: $commit_id2" >> $testroot/stdout.expected
129 	echo "refs/heads/master: $commit_id" >> $testroot/stdout.expected
130 	echo "refs/tags/$tag: $tag_id" >> $testroot/stdout.expected
131 	echo "refs/tags/$tag2: $tag_id2" >> $testroot/stdout.expected
132 	cmp -s $testroot/stdout $testroot/stdout.expected
133 	ret=$?
134 	if [ $ret -ne 0 ]; then
135 		diff -u $testroot/stdout.expected $testroot/stdout
136 	fi
137 	test_done "$testroot" "$ret"
138 }
139 
140 test_tag_list() {
141 	local testroot=`test_init tag_list`
142 	local commit_id=`git_show_head $testroot/repo`
143 	local tag=1.0.0
144 	local tag2=2.0.0
145 
146 	# create tag with Git
147 	(cd $testroot/repo && git tag -a -m 'test' $tag)
148 	# create tag with Got
149 	(cd $testroot/repo && got tag -m 'test' $tag2 > /dev/null)
150 
151 	tag_id=`got ref -r $testroot/repo -l \
152 		| grep "^refs/tags/$tag" | tr -d ' ' | cut -d: -f2`
153 	local tagger_time=`git_show_tagger_time $testroot/repo $tag`
154 	
155 	local prev_LC_TIME=$LC_TIME
156 	export LC_TIME=C
157 	d1=`date -u -d "@$tagger_time" +"%a %b %e %X %Y UTC"`
158 	LC_TIME="$prev_LC_TIME"
159 
160 	tag_id2=`got ref -r $testroot/repo -l \
161 		| grep "^refs/tags/$tag2" | tr -d ' ' | cut -d: -f2`
162 	local tagger_time2=`git_show_tagger_time $testroot/repo $tag2`
163 	
164 	prev_LC_TIME="$LC_TIME"
165 	export LC_TIME=C
166 	d2=`date -u -d "@$tagger_time2" +"%a %b %e %X %Y UTC"`
167 	LC_TIME="$prev_LC_TIME"
168 
169 	got tag -r $testroot/repo -l > $testroot/stdout
170 
171 	echo "-----------------------------------------------" \
172 		> $testroot/stdout.expected
173 	echo "tag $tag2 $tag_id2" >> $testroot/stdout.expected
174 	echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
175 	echo "date: $d2" >> $testroot/stdout.expected
176 	echo "object: commit $commit_id" >> $testroot/stdout.expected
177 	echo " " >> $testroot/stdout.expected
178 	echo " test" >> $testroot/stdout.expected
179 	echo " " >> $testroot/stdout.expected
180 	echo "-----------------------------------------------" \
181 		>> $testroot/stdout.expected
182 	echo "tag $tag $tag_id" >> $testroot/stdout.expected
183 	echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
184 	echo "date: $d1" >> $testroot/stdout.expected
185 	echo "object: commit $commit_id" >> $testroot/stdout.expected
186 	echo " " >> $testroot/stdout.expected
187 	echo " test" >> $testroot/stdout.expected
188 	echo " " >> $testroot/stdout.expected
189 	cmp -s $testroot/stdout $testroot/stdout.expected
190 	ret=$?
191 	if [ $ret -ne 0 ]; then
192 		diff -u $testroot/stdout.expected $testroot/stdout
193 		test_done "$testroot" "$ret"
194 		return 1
195 	fi
196 
197 	got tag -r $testroot/repo -l $tag > $testroot/stdout
198 
199 	echo "-----------------------------------------------" \
200 		> $testroot/stdout.expected
201 	echo "tag $tag $tag_id" >> $testroot/stdout.expected
202 	echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
203 	echo "date: $d1" >> $testroot/stdout.expected
204 	echo "object: commit $commit_id" >> $testroot/stdout.expected
205 	echo " " >> $testroot/stdout.expected
206 	echo " test" >> $testroot/stdout.expected
207 	echo " " >> $testroot/stdout.expected
208 	cmp -s $testroot/stdout $testroot/stdout.expected
209 	ret=$?
210 	if [ $ret -ne 0 ]; then
211 		diff -u $testroot/stdout.expected $testroot/stdout
212 		test_done "$testroot" "$ret"
213 		return 1
214 	fi
215 
216 	got tag -r $testroot/repo -l $tag2 > $testroot/stdout
217 
218 	echo "-----------------------------------------------" \
219 		> $testroot/stdout.expected
220 	echo "tag $tag2 $tag_id2" >> $testroot/stdout.expected
221 	echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
222 	echo "date: $d2" >> $testroot/stdout.expected
223 	echo "object: commit $commit_id" >> $testroot/stdout.expected
224 	echo " " >> $testroot/stdout.expected
225 	echo " test" >> $testroot/stdout.expected
226 	echo " " >> $testroot/stdout.expected
227 	cmp -s $testroot/stdout $testroot/stdout.expected
228 	ret=$?
229 	if [ $ret -ne 0 ]; then
230 		diff -u $testroot/stdout.expected $testroot/stdout
231 	fi
232 	test_done "$testroot" "$ret"
233 }
234 
235 test_tag_list_lightweight() {
236 	local testroot=`test_init tag_list_lightweight`
237 	local commit_id=`git_show_head $testroot/repo`
238 	local tag=1.0.0
239 	local tag2=2.0.0
240 
241 	# create "lightweight" tag with Git
242 	(cd $testroot/repo && git tag $tag)
243 	(cd $testroot/repo && git tag $tag2)
244 
245 	tag_id=`got ref -r $testroot/repo -l \
246 		| grep "^refs/tags/$tag" | tr -d ' ' | cut -d: -f2`
247 	local tagger_time=`git_show_author_time $testroot/repo $tag`
248 	local prev_LC_TIME=$LC_TIME
249 	export LC_TIME=C
250 	d1=`date -u -d "@$tagger_time" +"%a %b %e %X %Y UTC"`
251 	LC_TIME="$prev_LC_TIME"
252 	tag_id2=`got ref -r $testroot/repo -l \
253 		| grep "^refs/tags/$tag2" | tr -d ' ' | cut -d: -f2`
254 	local tagger_time2=`git_show_author_time $testroot/repo $tag2`
255 	
256 	export LC_TIME=C
257 	d2=`date -u -d "@$tagger_time2" +"%a %b %e %X %Y UTC"`
258 	LC_TIME="$prev_LC_TIME"
259 
260 	got tag -r $testroot/repo -l > $testroot/stdout
261 
262 	# test signature validation ignoring lightweight tags
263 	got tag -r $testroot/repo -V > $testroot/stdout
264 
265 	echo "-----------------------------------------------" \
266 		> $testroot/stdout.expected
267 	echo "tag $tag2 $tag_id2" >> $testroot/stdout.expected
268 	echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
269 	echo "date: $d2" >> $testroot/stdout.expected
270 	echo "object: commit $commit_id" >> $testroot/stdout.expected
271 	echo " " >> $testroot/stdout.expected
272 	echo " adding the test tree" >> $testroot/stdout.expected
273 	echo " " >> $testroot/stdout.expected
274 	echo "-----------------------------------------------" \
275 		>> $testroot/stdout.expected
276 	echo "tag $tag $tag_id" >> $testroot/stdout.expected
277 	echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
278 	echo "date: $d1" >> $testroot/stdout.expected
279 	echo "object: commit $commit_id" >> $testroot/stdout.expected
280 	echo " " >> $testroot/stdout.expected
281 	echo " adding the test tree" >> $testroot/stdout.expected
282 	echo " " >> $testroot/stdout.expected
283 	cmp -s $testroot/stdout $testroot/stdout.expected
284 	ret=$?
285 	if [ $ret -ne 0 ]; then
286 		diff -u $testroot/stdout.expected $testroot/stdout
287 	fi
288 	test_done "$testroot" "$ret"
289 }
290 
291 test_tag_create_ssh_signed() {
292 	local testroot=`test_init tag_create`
293 	local commit_id=`git_show_head $testroot/repo`
294 	local tag=1.0.0
295 	local tag2=2.0.0
296 	local tag3=3.0.0
297 
298 	ssh-keygen -q -N '' -t ed25519 -f $testroot/id_ed25519
299 	ret=$?
300 	if [ $ret -ne 0 ]; then
301 		echo "ssh-keygen failed unexpectedly"
302 		test_done "$testroot" "$ret"
303 		return 1
304 	fi
305 	touch $testroot/allowed_signers
306 	touch $testroot/revoked_signers
307 	echo "allowed_signers \"$testroot/allowed_signers\"" >> \
308 		$testroot/repo/.git/got.conf
309 	echo "revoked_signers \"$testroot/revoked_signers\"" >> \
310 		$testroot/repo/.git/got.conf
311 
312 	# Create a signed tag based on repository's HEAD reference
313 	got tag -s $testroot/id_ed25519 -m 'test' -r $testroot/repo -c HEAD \
314 		$tag > $testroot/stdout
315 	ret=$?
316 	if [ $ret -ne 0 ]; then
317 		echo "got tag command failed unexpectedly"
318 		test_done "$testroot" "$ret"
319 		return 1
320 	fi
321 
322 	tag_id=`got ref -r $testroot/repo -l \
323 		| grep "^refs/tags/$tag" | tr -d ' ' | cut -d: -f2`
324 	echo "Created tag $tag_id" > $testroot/stdout.expected
325 	cmp -s $testroot/stdout $testroot/stdout.expected
326 	ret=$?
327 	if [ $ret -ne 0 ]; then
328 		diff -u $testroot/stdout.expected $testroot/stdout
329 		test_done "$testroot" "$ret"
330 		return 1
331 	fi
332 
333 	# Ensure validation fails when the key is not allowed
334 	echo "signature: Could not verify signature." > \
335 		$testroot/stdout.expected
336 	VERIFY_STDOUT=$(got tag -r $testroot/repo -V $tag 2> $testroot/stderr)
337 	ret=$?
338 	echo "$VERIFY_STDOUT" | grep '^signature: ' > $testroot/stdout
339 	if [ $ret -eq 0 ]; then
340 		diff -u $testroot/stdout.expected $testroot/stdout
341 		test_done "$testroot" "1"
342 		return 1
343 	fi
344 
345 	GOOD_SIG='Good "git" signature for flan_hacker@openbsd.org with ED25519 key '
346 
347 	# Validate the signature with the key allowed
348 	echo -n 'flan_hacker@openbsd.org ' > $testroot/allowed_signers
349 	cat $testroot/id_ed25519.pub >> $testroot/allowed_signers
350 	GOT_STDOUT=$(got tag -r $testroot/repo -V $tag 2> $testroot/stderr)
351 	ret=$?
352 	if [ $ret -ne 0 ]; then
353 		echo "got tag command failed unexpectedly"
354 		diff -u $testroot/stdout.expected $testroot/stdout
355 		test_done "$testroot" "$ret"
356 		return 1
357 	fi
358 
359 	if ! echo "$GOT_STDOUT" | grep -q "^signature: $GOOD_SIG"; then
360 		echo "got tag command failed to validate signature"
361 		test_done "$testroot" "1"
362 		return 1
363 	fi
364 
365 	# Ensure validation fails after revoking the key
366 	ssh-keygen -y -f $testroot/id_ed25519 >> $testroot/revoked_signers
367 	echo "signature: Could not verify signature." > \
368 		$testroot/stdout.expected
369 	VERIFY_STDOUT=$(got tag -r $testroot/repo -V $tag 2> $testroot/stderr)
370 	ret=$?
371 	echo "$VERIFY_STDOUT" | grep '^signature: ' > $testroot/stdout
372 	if [ $ret -eq 0 ]; then
373 		diff -u $testroot/stdout.expected $testroot/stdout
374 		test_done "$testroot" "1"
375 		return 1
376 	fi
377 
378 	# Later tests expect validation to work
379 	echo -n > $testroot/revoked_signers
380 
381 	# Ensure that Git recognizes and verifies the tag Got has created
382 	(cd $testroot/repo && git checkout -q $tag)
383 	ret=$?
384 	if [ $ret -ne 0 ]; then
385 		echo "git checkout command failed unexpectedly"
386 		test_done "$testroot" "$ret"
387 		return 1
388 	fi
389 	(cd $testroot/repo && git config --local gpg.ssh.allowedSignersFile \
390 		$testroot/allowed_signers)
391 	GIT_STDERR=$(cd $testroot/repo && git tag -v $tag 2>&1 1>/dev/null)
392 	if ! echo "$GIT_STDERR" | grep -q "^$GOOD_SIG"; then
393 		echo "git tag command failed to validate signature"
394 		test_done "$testroot" "1"
395 		return 1
396 	fi
397 
398 	# Ensure Got recognizes the new tag
399 	got checkout -c $tag $testroot/repo $testroot/wt >/dev/null
400 	ret=$?
401 	if [ $ret -ne 0 ]; then
402 		echo "got checkout command failed unexpectedly"
403 		test_done "$testroot" "$ret"
404 		return 1
405 	fi
406 
407 	# Create another signed tag with a SHA1 commit ID
408 	got tag -s $testroot/id_ed25519 -m 'test' -r $testroot/repo \
409 		-c $commit_id $tag2 > $testroot/stdout
410 
411 	# Create another signed tag with key defined in got.conf(5)
412 	echo "signer_id \"$testroot/id_ed25519\"" >> \
413 		$testroot/repo/.git/got.conf
414 	got tag -m 'test' -r $testroot/repo -c HEAD $tag3 > $testroot/stdout
415 	ret=$?
416 	if [ $ret -ne 0 ]; then
417 		echo "got tag command failed unexpectedly"
418 		test_done "$testroot" "$ret"
419 		return 1
420 	fi
421 
422 	# got tag -V behaves like got tag -l, but with verification enabled.
423 	got tag -l -r $testroot/repo > $testroot/stdout.list
424 	got tag -V -r $testroot/repo > $testroot/stdout.verify
425 	diff -U0 $testroot/stdout.list $testroot/stdout.verify |
426 	    sed -e '/^--- /d' -e '/^+++ /d' > $testroot/stdout
427 	echo "@@ -5,0 +6 @@" > $testroot/stdout.expected
428 	echo -n "+signature: $GOOD_SIG" >> $testroot/stdout.expected
429 	ssh-keygen -l -f $testroot/id_ed25519.pub | cut -d' ' -f 2 \
430 		>> $testroot/stdout.expected
431 	echo "@@ -19,0 +21 @@" >> $testroot/stdout.expected
432 	echo -n "+signature: $GOOD_SIG" >> $testroot/stdout.expected
433 	ssh-keygen -l -f $testroot/id_ed25519.pub | cut -d' ' -f 2 \
434 		>> $testroot/stdout.expected
435 	echo "@@ -33,0 +36 @@" >> $testroot/stdout.expected
436 	echo -n "+signature: $GOOD_SIG" >> $testroot/stdout.expected
437 	ssh-keygen -l -f $testroot/id_ed25519.pub | cut -d' ' -f 2 \
438 		>> $testroot/stdout.expected
439 	cmp -s $testroot/stdout $testroot/stdout.expected
440 	ret=$?
441 	if [ $ret -ne 0 ]; then
442 		diff -u $testroot/stdout.expected $testroot/stdout
443 	fi
444 	test_done "$testroot" "$ret"
445 }
446 
447 test_tag_create_ssh_signed_missing_key() {
448 	local testroot=`test_init tag_create`
449 	local commit_id=`git_show_head $testroot/repo`
450 	local tag=1.0.0
451 
452 	# Fail to create a signed tag due to a missing SSH key
453 	got tag -s $testroot/bogus -m 'test' -r $testroot/repo \
454 		-c HEAD	$tag > $testroot/stdout 2> $testroot/stderr
455 	ret=$?
456 	if [ $ret -eq 0 ]; then
457 		echo "got tag command succeeded unexpectedly"
458 		test_done "$testroot" 1
459 		return 1
460 	fi
461 
462 	got ref -r $testroot/repo -l > $testroot/stdout
463 	echo "HEAD: refs/heads/master" > $testroot/stdout.expected
464 	echo "refs/heads/master: $commit_id" >> $testroot/stdout.expected
465 	cmp -s $testroot/stdout $testroot/stdout.expected
466 	ret=$?
467 	if [ $ret -ne 0 ]; then
468 		diff -u $testroot/stdout.expected $testroot/stdout
469 		test_done "$testroot" "$ret"
470 		return 1
471 	fi
472 	printf "Couldn't load public key $testroot/bogus: " \
473 		>> $testroot/stderr.expected
474 	printf "No such file or directory\r\n" >> $testroot/stderr.expected
475 	echo "got: unable to sign tag" >> $testroot/stderr.expected
476 	cmp -s $testroot/stderr $testroot/stderr.expected
477 	ret=$?
478 	if [ $ret -ne 0 ]; then
479 		diff -u $testroot/stderr.expected $testroot/stderr
480 	fi
481 	test_done "$testroot" "$ret"
482 }
483 
484 test_parseargs "$@"
485 run_test test_tag_create
486 run_test test_tag_list
487 run_test test_tag_list_lightweight
488 run_test test_tag_create_ssh_signed
489 run_test test_tag_create_ssh_signed_missing_key