mirror of
https://github.com/rbenv/ruby-build.git
synced 2025-10-22 13:50:33 +02:00
fb5e2b1ae6
A more secure hashing algorithm makes it less feasible to serve up a modified tarball that matches the same checksum. See the discussion in #548
90 lines
2.2 KiB
Bash
90 lines
2.2 KiB
Bash
#!/usr/bin/env bats
|
|
|
|
load test_helper
|
|
export RUBY_BUILD_SKIP_MIRROR=1
|
|
export RUBY_BUILD_CACHE_PATH="$TMP/cache"
|
|
|
|
setup() {
|
|
mkdir "$RUBY_BUILD_CACHE_PATH"
|
|
}
|
|
|
|
|
|
@test "packages are saved to download cache" {
|
|
stub shasum true
|
|
stub curl "-q -o * -*S* http://example.com/* : cp $FIXTURE_ROOT/\${5##*/} \$3"
|
|
|
|
install_fixture definitions/without-checksum
|
|
[ "$status" -eq 0 ]
|
|
[ -e "${RUBY_BUILD_CACHE_PATH}/package-1.0.0.tar.gz" ]
|
|
|
|
unstub curl
|
|
unstub shasum
|
|
}
|
|
|
|
|
|
@test "cached package without checksum" {
|
|
stub shasum true
|
|
stub curl
|
|
|
|
cp "${FIXTURE_ROOT}/package-1.0.0.tar.gz" "$RUBY_BUILD_CACHE_PATH"
|
|
|
|
install_fixture definitions/without-checksum
|
|
[ "$status" -eq 0 ]
|
|
[ -e "${RUBY_BUILD_CACHE_PATH}/package-1.0.0.tar.gz" ]
|
|
|
|
unstub curl
|
|
unstub shasum
|
|
}
|
|
|
|
|
|
@test "cached package with valid checksum" {
|
|
stub shasum true "echo ba988b1bb4250dee0b9dd3d4d722f9c64b2bacfc805d1b6eba7426bda72dd3c5"
|
|
stub curl
|
|
|
|
cp "${FIXTURE_ROOT}/package-1.0.0.tar.gz" "$RUBY_BUILD_CACHE_PATH"
|
|
|
|
install_fixture definitions/with-checksum
|
|
[ "$status" -eq 0 ]
|
|
[ -x "${INSTALL_ROOT}/bin/package" ]
|
|
[ -e "${RUBY_BUILD_CACHE_PATH}/package-1.0.0.tar.gz" ]
|
|
|
|
unstub curl
|
|
unstub shasum
|
|
}
|
|
|
|
|
|
@test "cached package with invalid checksum falls back to mirror and updates cache" {
|
|
export RUBY_BUILD_SKIP_MIRROR=
|
|
local checksum="ba988b1bb4250dee0b9dd3d4d722f9c64b2bacfc805d1b6eba7426bda72dd3c5"
|
|
|
|
stub shasum true "echo invalid" "echo $checksum"
|
|
stub curl "-*I* : true" \
|
|
"-q -o * -*S* http://?*/$checksum : cp $FIXTURE_ROOT/package-1.0.0.tar.gz \$3"
|
|
|
|
touch "${RUBY_BUILD_CACHE_PATH}/package-1.0.0.tar.gz"
|
|
|
|
install_fixture definitions/with-checksum
|
|
[ "$status" -eq 0 ]
|
|
[ -x "${INSTALL_ROOT}/bin/package" ]
|
|
[ -e "${RUBY_BUILD_CACHE_PATH}/package-1.0.0.tar.gz" ]
|
|
diff -q "${RUBY_BUILD_CACHE_PATH}/package-1.0.0.tar.gz" "${FIXTURE_ROOT}/package-1.0.0.tar.gz"
|
|
|
|
unstub curl
|
|
unstub shasum
|
|
}
|
|
|
|
|
|
@test "nonexistent cache directory is ignored" {
|
|
stub shasum true
|
|
stub curl "-q -o * -*S* http://example.com/* : cp $FIXTURE_ROOT/\${5##*/} \$3"
|
|
|
|
export RUBY_BUILD_CACHE_PATH="${TMP}/nonexistent"
|
|
|
|
install_fixture definitions/without-checksum
|
|
[ "$status" -eq 0 ]
|
|
[ -x "${INSTALL_ROOT}/bin/package" ]
|
|
[ ! -d "$RUBY_BUILD_CACHE_PATH" ]
|
|
|
|
unstub curl
|
|
unstub shasum
|
|
}
|