# GNU Guix --- Functional package management for GNU
# Copyright © 2013, 2014 Ludovic Courtès <ludo@gnu.org>
#
# This file is part of GNU Guix.
#
# GNU Guix is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or (at
# your option) any later version.
#
# GNU Guix is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

#
# Test the 'guix authenticate' command-line utility.
#

guix authenticate --version

sig="t-signature-$$"
hash="t-hash-$$"
rm -f "$sig" "$hash"

trap 'rm -f "$sig" "$hash"' EXIT

# A hexadecimal string as long as a sha256 hash.
echo "2749f0ea9f26c6c7be746a9cff8fa4c2f2a02b000070dba78429e9a11f87c6eb" \
    > "$hash"

guix authenticate rsautl -sign				\
    -inkey "$abs_top_srcdir/tests/signing-key.sec"	\
    -in "$hash" > "$sig"
test -f "$sig"

hash2="`guix authenticate rsautl -verify		\
          -inkey $abs_top_srcdir/tests/signing-key.pub	\
          -pubin -in $sig`"
test "$hash2" = `cat "$hash"`

# Same thing in a pipeline, using the command line syntax that Nix/Crypto.pm
# uses.
hash2="`						\
  cat "$hash"						\
  | guix authenticate rsautl -sign			\
    -inkey "$abs_top_srcdir/tests/signing-key.sec"	\
  | guix authenticate rsautl -verify			\
          -inkey $abs_top_srcdir/tests/signing-key.pub	\
          -pubin`"
test "$hash2" = `cat "$hash"`

# Detect corrupt signatures.
if guix authenticate rsautl -verify				\
          -inkey "$abs_top_srcdir/tests/signing-key.pub"	\
          -pubin -in /dev/null
then false
else true
fi

# Detect invalid signatures.
# The signature has (payload (data ... (hash sha256 #...#))).  We proceed by
# modifying this hash.
sed -i "$sig"											\
    -e's|#[A-Z0-9]\{64\}#|#0000000000000000000000000000000000000000000000000000000000000000#|g'
if guix authenticate rsautl -verify				\
          -inkey "$abs_top_srcdir/tests/signing-key.pub"	\
          -pubin -in "$sig"
then false
else true
fi


# Test for <http://bugs.gnu.org/17312>: make sure 'guix authenticate' produces
# valid signatures when run in the C locale.
echo "5eff0b55c9c5f5e87b4e34cd60a2d5654ca1eb78c7b3c67c3179fed1cff07b4c" \
    > "$hash"

LC_ALL=C
export LC_ALL

guix authenticate rsautl -sign				\
    -inkey "$abs_top_srcdir/tests/signing-key.sec"	\
    -in "$hash" > "$sig"

guix authenticate rsautl -verify			\
        -inkey "$abs_top_srcdir/tests/signing-key.pub"	\
        -pubin -in "$sig"
hash2="`guix authenticate rsautl -verify		\
          -inkey $abs_top_srcdir/tests/signing-key.pub	\
          -pubin -in $sig`"
test "$hash2" = `cat "$hash"`
 title='2020-08-29 11:29:43 -0400'>2020-08-29</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=5aaa1995922285d53a97824f2b83bdb71ec9fdd0'>gnu: idris: Fix for Haskell build system changes.</a><span class='msg-avail'>...</span></td><td>Timothy Sample</td></tr>
<tr><td><span title='2020-03-09 16:01:18 +0100'>2020-03-09</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=17dea2e2798574d8bae4fc27a74cd694c6f9155c'>gnu: idris: Use HTTPS home page.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2019-11-20 20:48:50 -0500'>2019-11-20</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=3594b6699d3043029f85fda2ccd82da1ae17e61b'>gnu: idris: Fix Cabal dependency constraints.</a><span class='msg-avail'>...</span></td><td>Timothy Sample</td></tr>
<tr><td><span title='2019-11-20 20:48:22 -0500'>2019-11-20</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=03b0c92e2a75c73204791fa28858e0de21856c14'>gnu: ghc-megaparsec: Update to 7.0.5.</a><span class='msg-avail'>...</span></td><td>Timothy Sample</td></tr>
<tr><td><span title='2019-11-20 20:48:20 -0500'>2019-11-20</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=d44732025e286fde4cba6b86d69b0968a3fe9c03'>gnu: ghc-network: Update to 2.8.0.1.</a><span class='msg-avail'>...</span></td><td>Timothy Sample</td></tr>
<tr><td><span title='2019-09-24 21:15:24 -0500'>2019-09-24</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=4780db2c935110ea3254817ba0c519c229b9461e'>gnu: idris: Update to 1.3.2.</a><span class='msg-avail'>...</span></td><td>Eric Bavier</td></tr>
<tr><td><span title='2019-08-31 09:25:49 -0400'>2019-08-31</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=dddbc90c648a569ed3f6dcf8678cb94e63a8302f'>gnu: Move non-compilers out of haskell.scm.</a><span class='msg-avail'>...</span></td><td>Robert Vollmert</td></tr>
<tr><td><span title='2019-08-07 22:05:29 -0400'>2019-08-07</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=a1eb8be8ca1a0a4c952f264f8846b67a32db0ec8'>gnu: Remove ghc-parsec, ghc-stm, ghc-text, ghc-xhtml.</a><span class='msg-avail'>...</span></td><td>Robert Vollmert</td></tr>
<tr><td><span title='2019-04-11 19:34:01 -0500'>2019-04-11</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=89647ff1d4abc4674973392cb7e08d14898e3ac9'>gnu: idris: Run tests.</a><span class='msg-avail'>...</span></td><td>Eric Bavier</td></tr>
<tr><td><span title='2019-04-11 19:34:01 -0500'>2019-04-11</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=e16bc71015a2cc59f49e27720c0a93bc4188ed81'>gnu: idris: Enable FFI and GMP support.</a><span class='msg-avail'>...</span></td><td>Eric Bavier</td></tr>
<tr><td><span title='2019-04-11 19:34:00 -0500'>2019-04-11</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=a4df9ba4ec4def25232265d72722dcc348b9beb0'>gnu: idris: Upgrade to 1.3.1.</a><span class='msg-avail'>...</span></td><td>Eric Bavier</td></tr>
<tr><td><span title='2018-10-01 12:12:20 +0200'>2018-10-01</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=53812aa77f5c8a490191c069a13a927d365618c7'>gnu: idris: Update to 1.3.0.</a><span class='msg-avail'>...</span></td><td>Timothy Sample</td></tr>
<tr><td><span title='2018-10-01 12:12:08 +0200'>2018-10-01</span></td><td><a href='/guix/commit/gnu/packages/idris.scm?id=f54f04756f6d90c9fb3b5e45f3947329287f9b05'>gnu: ghc-mtl: Remove built-in Haskell package.</a><span class='msg-avail'>...</span></td><td>Timothy Sample</td></tr>