1 files changed, 54 insertions, 0 deletions
diff --git a/tests/futility/test_rwsig.sh b/tests/futility/test_rwsig.sh
new file mode 100755
index 00000000..efdb6dbb
--- /dev/null
+++ b/tests/futility/test_rwsig.sh
@@ -0,0 +1,54 @@
+#!/bin/bash -eux
+# Copyright 2017 The Chromium OS Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+me=${0##*/}
+TMP="$me.tmp"
+
+# Work in scratch directory
+cd "$OUTDIR"
+
+DATADIR="${SCRIPTDIR}/data"
+TESTKEYS=${SRCDIR}/tests/testkeys
+
+SIGS="1024 2048 2048_exp3 4096 8192"
+HASHES="SHA1 SHA256 SHA512"
+
+set -o pipefail
+
+for s in $SIGS; do
+    echo -n "$s " 1>&3
+
+    for h in $HASHES; do
+        pemfile=${TESTKEYS}/key_rsa${s}.pem
+        outfile=${TMP}.${s}_${h}.new
+        infile=${DATADIR}/hammer_dev.bin
+        outkeys=${TMP}.${s}_${h}
+        outfile=${TMP}.${s}_${h}.bin
+
+        ${FUTILITY} create --desc "Test key" --hash_alg ${h} \
+                    ${pemfile} ${outkeys}
+
+        # The input file should be correctly signed to start with
+        ${FUTILITY} show --type rwsig ${infile}
+
+        # Using the wrong key to verify it should fail
+        if ${FUTILITY} show --type rwsig --pubkey ${outkeys}.vbpubk2 \
+                       ${infile}; then
+            exit 1
+        fi
+
+        cp ${infile} ${outfile}
+
+        ${FUTILITY} sign --type rwsig --prikey ${outkeys}.vbprik2 \
+                --version 2 ${outfile}
+
+        ${FUTILITY} show --type rwsig --pubkey ${outkeys}.vbpubk2 ${outfile}
+        ${FUTILITY} show --type rwsig ${outfile}
+    done
+done
+
+# cleanup
+rm -rf ${TMP}*
+exit 0