1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
|
# pylint: skip-file
from conftest import *
from subprocess import CalledProcessError
from gitrevise.utils import sh_run
def test_gpgsign(repo, short_tmpdir, monkeypatch):
bash("git commit --allow-empty -m 'commit 1'")
assert repo.get_commit("HEAD").gpgsig is None
# On MacOS, pytest's temp paths are too long for gpg-agent.
# See https://github.com/pytest-dev/pytest/issues/5802
gnupghome = short_tmpdir
# On windows, convert the path to git-bash's unix format before writing it
# into the environment, as the gpg binary reading it is run under mingw.
if os.name == "nt":
proc = sh_run(
["cygpath", "-u", str(gnupghome)],
capture_output=True,
check=True,
)
monkeypatch.setenv("GNUPGHOME", proc.stdout.decode().strip())
else:
monkeypatch.setenv("GNUPGHOME", str(gnupghome))
gnupghome.chmod(0o700)
(gnupghome / "gpg.conf").write("pinentry-mode loopback")
user_ident = repo.default_author.signing_key
sh_run(
["gpg", "--batch", "--passphrase", "", "--quick-gen-key", user_ident],
check=True,
)
bash("git config commit.gpgSign true")
main(["HEAD"])
assert (
repo.get_commit("HEAD").gpgsig is not None
), "git config commit.gpgSign activates GPG signing"
bash("git config revise.gpgSign false")
main(["HEAD"])
assert (
repo.get_commit("HEAD").gpgsig is None
), "git config revise.gpgSign overrides commit.gpgSign"
main(["HEAD", "--gpg-sign"])
assert (
repo.get_commit("HEAD").gpgsig is not None
), "commandline option overrides configuration"
main(["HEAD", "--no-gpg-sign"])
assert repo.get_commit("HEAD").gpgsig is None, "long option"
main(["HEAD", "-S"])
assert repo.get_commit("HEAD").gpgsig is not None, "short option"
bash("git config gpg.program false")
try:
main(["HEAD", "--gpg-sign"])
assert False, "Overridden gpg.program should fail"
except CalledProcessError:
pass
bash("git config --unset gpg.program")
# Check that we can sign multiple commits.
bash(
"""
git -c commit.gpgSign=false commit --allow-empty -m 'commit 2'
git -c commit.gpgSign=false commit --allow-empty -m 'commit 3'
git -c commit.gpgSign=false commit --allow-empty -m 'commit 4'
"""
)
main(["HEAD~~", "--gpg-sign"])
assert repo.get_commit("HEAD~~").gpgsig is not None
assert repo.get_commit("HEAD~").gpgsig is not None
assert repo.get_commit("HEAD").gpgsig is not None
# Check that we can remove signatures from multiple commits.
main(["HEAD~", "--no-gpg-sign"])
assert repo.get_commit("HEAD~").gpgsig is None
assert repo.get_commit("HEAD").gpgsig is None
# Check that we add signatures, even if the target commit already has one.
assert repo.get_commit("HEAD~~").gpgsig is not None
main(["HEAD~~", "--gpg-sign"])
assert repo.get_commit("HEAD~").gpgsig is not None
assert repo.get_commit("HEAD").gpgsig is not None
|
