cd $p
+reporefs () {
+ (set -e
+ if test -d $tmp/git/$p.git; then
+ cd $tmp/git/$p.git
+ git show-ref
+ fi)
+}
+
mustfail () {
local wantmsg="$1"; shift
+ reporefs >$tmp/show-refs.pre-push
set +e
git push origin "$@" 2>&1 |tee $tmp/mustfail.txt
ps="${PIPESTATUS[*]}"
if ! fgrep "$wantmsg" $tmp/mustfail.txt >/dev/null; then
fail "error message not found"
fi
+ reporefs >$tmp/show-refs.post-push
+ diff $tmp/show-refs.{pre,post}-push
+}
+
+mustsucceed () {
+ reporefs >$tmp/show-refs.pre-push
+ git push origin "$@"
+ reporefs >$tmp/show-refs.post-push
+ if diff $tmp/show-refs.{pre,post}-push >$tmp/show-refs.diff; then
+ fail "no refs updated"
+ fi
}
prep () {
# fixme cannot test reject "signature is not of type 00!";
prep unstable sid
-git push origin $push_spec # succeeds
+mktag
+mustfail 'push is missing tag ref update' $push_spec1
+mustfail 'push is missing head ref update' $push_spec2
+mustfail 'pushing unexpected ref' $push_spec HEAD:refs/wombat
+mustfail 'pushing multiple heads' $push_spec HEAD:refs/dgit/wombat
+mustfail 'pushing multiple tags' $push_spec HEAD:refs/tags/debian/wombat
+
+prep unstable sid
+mktag
+cp $tmp/dm.gpg $tmp/dd.gpg
+mustfail 'key not found in keyrings' $push_spec
+
+prep unstable sid
+mustsucceed $push_spec # succeeds
mktag
mustfail 'not replacing previously-pushed version' $push_spec
+prep_dm_mangle () {
+ prep unstable sid
+ perl -i.bak -pe '
+ next unless m/^fingerprint: 3A82860837A0CD32/i../^$/;
+ ' -e "$1" $tmp/dm.txt
+ tag_signer='-u Populus'
+ mktag
+}
+
git checkout v2
version=3-2_dummy2
-prep unstable sid
-tag_signer='-u Populus'
-mktag
-git push origin $push_spec # succeeds
+
+prep_dm_mangle 's/allow:/asponge:/i'
+mustfail 'missing Allow section in permission' $push_spec
+
+prep_dm_mangle 's/\bpari-extra\b/sponge/i'
+mustfail "package $p not allowed for key" $push_spec
+
+prep_dm_mangle 'y/0-9/5-90-4/ if m/^fingerprint:/i'
+mustfail "not in permissions list although in keyring" $push_spec
+
+prep_dm_mangle ''
+mustsucceed $push_spec # succeeds
echo ok.