ochenstarik/server-monitor-manager
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases 17 Packages Wiki Activity Actions

test(desktop): restore valid release assertion in live update verification tests

Browse source
This commit is contained in:
Ochenstarik 2026-08-18 00:24:26 +07:00
parent 5dcd420d34
commit 279349f445
1 changed files with 9 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
tests/ServerMonitorManager.Desktop.Security.Tests/LiveReleaseUpdateVerificationTests.cs
View file

@ -2,6 +2,7 @@ using System;
using System.IO; using System.IO;
using System.Net.Http; using System.Net.Http;
using System.Security.Cryptography; using System.Security.Cryptography;
using System.Security.Cryptography.X509Certificates;
using System.Text; using System.Text;
using System.Text.Json.Nodes; using System.Text.Json.Nodes;
using System.Threading.Tasks; using System.Threading.Tasks;
@ -50,7 +51,7 @@ public sealed class LiveReleaseUpdateVerificationTests : IAsyncDisposable
} }
[Fact] [Fact]
public async Task Acceptance_RealReleaseManifestAndSignatureAreAccepted() public async Task AcceptanceRealReleaseManifestAndSignatureAreAccepted()
{ {
var (manifestPath, sigPath, pemPath) = await DownloadReleaseArtifactsAsync(); var (manifestPath, sigPath, pemPath) = await DownloadReleaseArtifactsAsync();
@ -108,17 +109,17 @@ public sealed class LiveReleaseUpdateVerificationTests : IAsyncDisposable
var updateInfo = await service.CheckForUpdatesAsync(cancellationToken: TestContext.Current.CancellationToken); var updateInfo = await service.CheckForUpdatesAsync(cancellationToken: TestContext.Current.CancellationToken);
Assert.NotNull(updateInfo); Assert.NotNull(updateInfo);
Assert.Equal("v999.999.999-intentional-failure", updateInfo.Version); Assert.Equal(_tag, updateInfo.Version);
Assert.Equal(msixHash, updateInfo.ExpectedHash); Assert.Equal(msixHash, updateInfo.ExpectedHash);
Assert.Contains(_tag, updateInfo.DownloadUrl, StringComparison.OrdinalIgnoreCase); Assert.Contains(_tag, updateInfo.DownloadUrl, StringComparison.OrdinalIgnoreCase);
} }
[Fact] [Fact]
public async Task Negative1_TamperedHashInRealManifestIsRejected() public async Task Negative1TamperedHashInRealManifestIsRejected()
{ {
var (manifestPath, sigPath, pemPath) = await DownloadReleaseArtifactsAsync(); var (manifestPath, sigPath, pemPath) = await DownloadReleaseArtifactsAsync();
// Alter the manifest content by tampering with the hash // Alter manifest content by tampering with the hash
var originalManifest = await File.ReadAllTextAsync(manifestPath, TestContext.Current.CancellationToken); var originalManifest = await File.ReadAllTextAsync(manifestPath, TestContext.Current.CancellationToken);
var tamperedManifest = originalManifest.Replace( var tamperedManifest = originalManifest.Replace(
"710813668ac5efacc245472afd4da6dca6739c042b5189bd12c2bbbd3c6b7e19", "710813668ac5efacc245472afd4da6dca6739c042b5189bd12c2bbbd3c6b7e19",
@ -139,7 +140,7 @@ public sealed class LiveReleaseUpdateVerificationTests : IAsyncDisposable
} }
[Fact] [Fact]
public async Task Negative2_RealManifestWithSignatureFromDifferentIdentityIsRejected() public async Task Negative2RealManifestWithSignatureFromDifferentIdentityIsRejected()
{ {
var (manifestPath, _, pemPath) = await DownloadReleaseArtifactsAsync(); var (manifestPath, _, pemPath) = await DownloadReleaseArtifactsAsync();
@ -162,7 +163,7 @@ public sealed class LiveReleaseUpdateVerificationTests : IAsyncDisposable
} }
[Fact] [Fact]
public async Task Negative3_MissingCertificateIsRejected() public async Task Negative3MissingCertificateIsRejected()
{ {
var (manifestPath, sigPath, _) = await DownloadReleaseArtifactsAsync(); var (manifestPath, sigPath, _) = await DownloadReleaseArtifactsAsync();
var nonExistentPemPath = Path.Combine(_tempDir, "non-existent-certificate.pem"); var nonExistentPemPath = Path.Combine(_tempDir, "non-existent-certificate.pem");
@ -177,13 +178,13 @@ public sealed class LiveReleaseUpdateVerificationTests : IAsyncDisposable
} }
[Fact] [Fact]
public async Task Negative4_CertificateFromDifferentWorkflowIsRejected() public async Task Negative4CertificateFromDifferentWorkflowIsRejected()
{ {
var (manifestPath, sigPath, _) = await DownloadReleaseArtifactsAsync(); var (manifestPath, sigPath, _) = await DownloadReleaseArtifactsAsync();
// Create a custom self-signed certificate with a different subject/workflow identity // Create a custom self-signed certificate with a different subject/workflow identity
using var ecdsa = ECDsa.Create(ECCurve.NamedCurves.nistP256); using var ecdsa = ECDsa.Create(ECCurve.NamedCurves.nistP256);
var req = new System.Security.Cryptography.X509Certificates.CertificateRequest( var req = new CertificateRequest(
"CN=Untrusted Workflow Fake Cert", "CN=Untrusted Workflow Fake Cert",
ecdsa, ecdsa,
HashAlgorithmName.SHA256); HashAlgorithmName.SHA256);