43 lines
1.3 KiB
Go
43 lines
1.3 KiB
Go
//go:build !noselfupdate
|
|
// +build !noselfupdate
|
|
|
|
package selfupdate
|
|
|
|
import (
|
|
"context"
|
|
"encoding/hex"
|
|
"os"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestVerify(t *testing.T) {
|
|
ctx := context.Background()
|
|
sumsBuf, err := os.ReadFile("testdata/verify/SHA256SUMS")
|
|
require.NoError(t, err)
|
|
hash, err := hex.DecodeString("b20b47f579a2c790ca752fb5d8e5651fade7d5867cbac0a4f71e805fc5c468d0")
|
|
require.NoError(t, err)
|
|
|
|
t.Run("NoError", func(t *testing.T) {
|
|
err = verifyHashsumDownloaded(ctx, sumsBuf, "archive.zip", hash)
|
|
require.NoError(t, err)
|
|
})
|
|
t.Run("BadSig", func(t *testing.T) {
|
|
sumsBuf[0x60] ^= 1 // change the signature by one bit
|
|
err = verifyHashsumDownloaded(ctx, sumsBuf, "archive.zip", hash)
|
|
assert.ErrorContains(t, err, "invalid signature")
|
|
sumsBuf[0x60] ^= 1 // undo the change
|
|
})
|
|
t.Run("BadSum", func(t *testing.T) {
|
|
hash[0] ^= 1 // change the SHA256 by one bit
|
|
err = verifyHashsumDownloaded(ctx, sumsBuf, "archive.zip", hash)
|
|
assert.ErrorContains(t, err, "archive hash mismatch")
|
|
hash[0] ^= 1 // undo the change
|
|
})
|
|
t.Run("BadName", func(t *testing.T) {
|
|
err = verifyHashsumDownloaded(ctx, sumsBuf, "archive.zipX", hash)
|
|
assert.ErrorContains(t, err, "unable to find hash")
|
|
})
|
|
}
|