Function TestMasterKey_decryptWithGnuPG

pgp/keysource_test.go:465–511

(t *testing.T)

}

func TestMasterKey_decryptWithGnuPG(t *testing.T) {
	t.Run("decrypt", func(t *testing.T) {
		gnuPGHome, err := NewGnuPGHome()
		assert.NoError(t, err)
		t.Cleanup(func() {
			_ = os.RemoveAll(gnuPGHome.String())
		})
		assert.NoError(t, gnuPGHome.ImportFile(mockPrivateKey))

		fingerprint := shortenFingerprint(mockFingerprint)

		data := []byte("this data is absolutely top secret")
		stdout, stderr, err := gpgExec(context.Background(), gnuPGHome.String(), []string{
			"--no-default-recipient",
			"--yes",
			"--encrypt",
			"-a",
			"-r",
			fingerprint,
			"--trusted-key",
			fingerprint,
			"--no-encrypt-to",
		}, bytes.NewReader(data))
		assert.Nil(t, err)
		assert.NoErrorf(t, gnuPGHome.ImportFile(mockPrivateKey), stderr.String())

		encryptedData := stdout.String()
		assert.NotEqualValues(t, data, encryptedData)

		key := NewMasterKeyFromFingerprint(mockFingerprint)
		gnuPGHome.ApplyToMasterKey(key)
		key.EncryptedKey = encryptedData

		got, err := key.decryptWithGnuPG(context.Background())
		assert.NoError(t, err)
		assert.Equal(t, data, got)
	})

	t.Run("invalid data error", func(t *testing.T) {
		key := NewMasterKeyFromFingerprint(mockFingerprint)
		key.EncryptedKey = "absolute invalid"
		got, err := key.decryptWithGnuPG(context.Background())
		assert.Error(t, err)
		assert.ErrorContains(t, err, "gpg: no valid OpenPGP data found")
		assert.Nil(t, got)
	})
}

func TestMasterKey_EncryptDecrypt_RoundTrip(t *testing.T) {
	gnuPGHome, err := NewGnuPGHome()