From e2839c38c5733e5fa9a6186dafbb87dbf70e6896 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Miloslav=20Trma=C4=8D?= <mitr@redhat.com>
Date: Mon, 30 May 2016 20:41:49 +0200
Subject: [PATCH] Add a test for valid signature using an unknown public key

(The key was one-time-generated in a temporary directory,
and is, intentionally, not available.)

This is not conceptually related to the rest of the PR, just adding a
missing case to the test, except that the added fixture will be reused
in a prSignedBy test.
---
 signature/fixtures/unknown-key.signature | Bin 0 -> 558 bytes
 signature/mechanism_test.go              |   7 +++++++
 2 files changed, 7 insertions(+)
 create mode 100644 signature/fixtures/unknown-key.signature

diff --git a/signature/fixtures/unknown-key.signature b/signature/fixtures/unknown-key.signature
new file mode 100644
index 0000000000000000000000000000000000000000..2277b130dab415c59a76679a5ad1b1d252e98908
GIT binary patch
literal 558
zcmV+}0@3}W0h_?f%)r6;)IC>F;6ep6<LLuYNetmW9nIBB$wiqZnaPPcN><fMnJKAx
zC7C6aAa+WAa&~HwZc%DlYEf!la;lP*Qb}rYNoHQUer{r3W*U&KRI8(unVXoNiliPU
zr<;<Q4pL&JRGg7$WNKz*WRR3*WSE*_VrrgbY-wO&WSN|jl$x4sVQy)fXr7dsXlQ0+
zW@%}dmXc^@V4P}@VqlnLl4_o2W?*7uo@#0evaF=C0OXFulKkAvWQFAXypqJsywoCv
z;>`5C#FEmYRFI<lf|AVqJcx&qi&BA#ix7GY^bGY3jdfE}%ank|W#$5%n3!9jWMyb#
zW@2V+Y+`OwTieMf!@|JG!NA7K1PUSsE=~bhz~yOjFsu?d#M(1oZvI;a?Wfz>(=Id~
zsyD2^7m{SL`O>k)B`-?0L@ZL}y()d};O`xMqGhb%F57k~E|suqk3T$<)gj}0*ap{D
zP2IHKDMlR5Gxub_Kl@<)%f}1!o6<K(=pV_oGJh(5(!qba(y5}r8*|>TNIx?F!IJ5E
z){OaV0yD&Jzxz99M$RSs71wGNzAxRsP|#lH=4m$Oh*Jw+sOCSFsqK$otN&uzd8ao0
zYvO<Nu5A)GYkMMDQ@Y;dZ@Q@AKTrC;*;1F;pZ6uO`5P`hlc4u#<GHtOZ+vgfj=9+P
wt@`4=s#oFLm6^F^Y!5!||80_%{i`8HNuDw5<)0LV+^unwca$~0i}f@F08-i{D*ylh

literal 0
HcmV?d00001

diff --git a/signature/mechanism_test.go b/signature/mechanism_test.go
index 8617b6d2..e6cbc0a7 100644
--- a/signature/mechanism_test.go
+++ b/signature/mechanism_test.go
@@ -138,5 +138,12 @@ func TestGPGSigningMechanismVerify(t *testing.T) {
 	require.NoError(t, err)
 	content, signingFingerprint, err = mech.Verify(signature)
 	assertSigningError(t, content, signingFingerprint, err)
+
+	// Valid signature with an unknown key
+	signature, err = ioutil.ReadFile("./fixtures/unknown-key.signature")
+	require.NoError(t, err)
+	content, signingFingerprint, err = mech.Verify(signature)
+	assertSigningError(t, content, signingFingerprint, err)
+
 	// The various GPG/GPGME failures cases are not obviously easy to reach.
 }