From 7f046c653c63e455d208c77b6611c7027ec8447b Mon Sep 17 00:00:00 2001 From: drbrain Date: Sat, 9 Feb 2013 00:24:55 +0000 Subject: * lib/rubygems/package/old.rb: Fix behavior only on ruby 1.8. * lib/rubygems/package.rb: Include checksums.yaml.gz signatures for verification. * test/rubygems/test_gem_package.rb: Test for the above. git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@39166 b2dd03c8-39d4-4d8f-98ff-823fe69b080e --- test/rubygems/test_gem_package.rb | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) (limited to 'test/rubygems') diff --git a/test/rubygems/test_gem_package.rb b/test/rubygems/test_gem_package.rb index d08f46d7d2..1e9603c6c7 100644 --- a/test/rubygems/test_gem_package.rb +++ b/test/rubygems/test_gem_package.rb @@ -511,6 +511,24 @@ class TestGemPackage < Gem::Package::TarTestCase assert_empty package.instance_variable_get(:@files), '@files must empty' end + def test_verify_security_policy_low_security + @spec.cert_chain = [PUBLIC_CERT.to_pem] + @spec.signing_key = PRIVATE_KEY + + FileUtils.mkdir_p 'lib' + FileUtils.touch 'lib/code.rb' + + build = Gem::Package.new @gem + build.spec = @spec + + build.build + + package = Gem::Package.new @gem + package.security_policy = Gem::Security::LowSecurity + + assert package.verify + end + def test_verify_security_policy_checksum_missing @spec.cert_chain = [PUBLIC_CERT.to_pem] @spec.signing_key = PRIVATE_KEY -- cgit v1.2.3