ksign 0.4.0

OpenWRT's `usign` utility rewritten in Rust. The crate provides both the executable and the library.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111

#![allow(clippy::unwrap_used)]

use std::path::Path;
use std::process::Command;

use tempfile::TempDir;
use test_bin::get_test_bin;

#[test]
fn test_usign() {
    let workdir = TempDir::new().unwrap();
    let public_key = workdir.path().join("public-key");
    let secret_key = workdir.path().join("secret-key");
    let signature = workdir.path().join("signature");
    Command::new("usign")
        .args([
            "-G",
            "-p",
            public_key.display().to_string().as_str(),
            "-s",
            secret_key.display().to_string().as_str(),
        ])
        .status()
        .unwrap();
    Command::new("usign")
        .args([
            "-S",
            "-m",
            public_key.display().to_string().as_str(),
            "-s",
            secret_key.display().to_string().as_str(),
            "-x",
            signature.display().to_string().as_str(),
        ])
        .status()
        .unwrap();
    compares_usign_and_ksign(
        public_key.as_path(),
        secret_key.as_path(),
        signature.as_path(),
    );
}

#[test]
fn test_ksign() {
    let workdir = TempDir::new().unwrap();
    let public_key = workdir.path().join("public-key");
    let secret_key = workdir.path().join("secret-key");
    let signature = workdir.path().join("signature");
    get_test_bin("ksign")
        .args([
            "-G",
            "-p",
            public_key.display().to_string().as_str(),
            "-s",
            secret_key.display().to_string().as_str(),
        ])
        .status()
        .unwrap();
    get_test_bin("ksign")
        .args([
            "-S",
            "-m",
            public_key.display().to_string().as_str(),
            "-s",
            secret_key.display().to_string().as_str(),
            "-x",
            signature.display().to_string().as_str(),
        ])
        .status()
        .unwrap();
    compares_usign_and_ksign(
        public_key.as_path(),
        secret_key.as_path(),
        signature.as_path(),
    );
}

fn compares_usign_and_ksign(public_key: &Path, secret_key: &Path, signature: &Path) {
    let args = ["-F", "-p", public_key.display().to_string().as_str()].map(|x| x.to_owned());
    assert_eq!(
        Command::new("usign").args(&args).output().unwrap(),
        get_test_bin("ksign").args(args).output().unwrap(),
        "public key fingerprint mismatch"
    );
    let args = ["-F", "-s", secret_key.display().to_string().as_str()].map(|x| x.to_owned());
    assert_eq!(
        Command::new("usign").args(&args).output().unwrap(),
        get_test_bin("ksign").args(args).output().unwrap(),
        "secret key fingerprint mismatch"
    );
    let args = ["-F", "-x", signature.display().to_string().as_str()].map(|x| x.to_owned());
    assert_eq!(
        Command::new("usign").args(&args).output().unwrap(),
        get_test_bin("ksign").args(args).output().unwrap(),
        "signature fingerprint mismatch"
    );
    let args = [
        "-V",
        "-m",
        public_key.display().to_string().as_str(),
        "-x",
        signature.display().to_string().as_str(),
        "-p",
        public_key.display().to_string().as_str(),
    ]
    .map(|x| x.to_owned());
    let expected = Command::new("usign").args(&args).output().unwrap();
    let actual = get_test_bin("ksign").args(args).output().unwrap();
    assert_eq!(expected, actual, "signature verification mismatch");
}