From c1e9b51c128cde4b5359618c28405981d690127e Mon Sep 17 00:00:00 2001
From: Ian Jackson <ijackson@chiark.greenend.org.uk>
Date: Sun, 31 May 2015 15:37:30 +0100
Subject: [PATCH] Test suite: add some replay prevention tests

---
 tests/tests/debpolicy-newreject   |  4 +---
 tests/tests/trustingpolicy-replay | 34 +++++++++++++++++++++++++++++++
 2 files changed, 35 insertions(+), 3 deletions(-)
 create mode 100755 tests/tests/trustingpolicy-replay

diff --git a/tests/tests/debpolicy-newreject b/tests/tests/debpolicy-newreject
index b2bf6bee..bda86947 100755
--- a/tests/tests/debpolicy-newreject
+++ b/tests/tests/debpolicy-newreject
@@ -82,6 +82,4 @@ cd $tmp/$p
 echo xxx up to here
 echo xxx want to test database lock retry thing on push-and-taint
 echo xxx want to test forbidden objects not present
-echo xxx want to check expect fail did not push
-echo xxx want to check replay prevention insufficient proofs in tag
-echo xxx want to check replay prevention removed tags file
+echo xxx want to check expect fail did not push "(everywhere)"
diff --git a/tests/tests/trustingpolicy-replay b/tests/tests/trustingpolicy-replay
new file mode 100755
index 00000000..f6053aaf
--- /dev/null
+++ b/tests/tests/trustingpolicy-replay
@@ -0,0 +1,34 @@
+#!/bin/bash
+set -e
+. tests/lib
+
+t-tstunt-parsechangelog
+
+t-policy dgit-repos-policy-trusting
+t-prep-newpackage example 1.0
+
+cd $p
+revision=1
+git tag start
+
+t-dgit build
+t-dgit push --new
+
+t-commit 'Prep v2 which will be rewound'
+t-dgit build
+t-dgit push
+
+t-rm-dput-dropping
+git checkout debian/1.0
+t-dgit build
+t-dgit push --deliberately-fresh-repo
+
+remote="`git config dgit-distro.test-dummy.git-url`/$p.git"
+
+t-expect-fail 'Replay of previously-rewound upload' \
+git push "$remote" \
+	debian/1.1 \
+	debian/1.1~0:refs/dgit/sid
+
+echo ok.
+echo xxx want to check replay prevention insufficient proofs in tag
-- 
2.30.2