diff --git a/tests/bootstrap/test-bootstrap-contract.sh b/tests/bootstrap/test-bootstrap-contract.sh index 4072be6..2b7405f 100755 --- a/tests/bootstrap/test-bootstrap-contract.sh +++ b/tests/bootstrap/test-bootstrap-contract.sh @@ -791,10 +791,11 @@ cat >"$fixture/server-monitor-manager-manifest.json" <"$fixture/server-monitor-manager-manifest.pem" if command -v cosign &>/dev/null; then COSIGN_PASSWORD="" cosign generate-key-pair --output-key-prefix="$fixture/contract-test" - COSIGN_PASSWORD="" cosign sign-blob --yes --key "$fixture/contract-test.key" \ + COSIGN_PASSWORD="" cosign sign-blob --yes --tlog-upload=false --key "$fixture/contract-test.key" \ --output-signature "$fixture/server-monitor-manager-manifest.sig" \ "$fixture/server-monitor-manager-manifest.json" SMM_TEST_PUBKEY="$fixture/contract-test.pub" \ @@ -814,7 +815,7 @@ cat >"$fixture/server-monitor-manager-manifest.json" </dev/null; then - COSIGN_PASSWORD="" cosign sign-blob --yes --key "$fixture/contract-test.key" \ + COSIGN_PASSWORD="" cosign sign-blob --yes --tlog-upload=false --key "$fixture/contract-test.key" \ --output-signature "$fixture/server-monitor-manager-manifest.sig" \ "$fixture/server-monitor-manager-manifest.json" if SMM_TEST_PUBKEY="$fixture/contract-test.pub" \ diff --git a/tests/bootstrap/test-release-contract.sh b/tests/bootstrap/test-release-contract.sh index 4f9cd4e..98c326c 100644 --- a/tests/bootstrap/test-release-contract.sh +++ b/tests/bootstrap/test-release-contract.sh @@ -65,6 +65,8 @@ grep -Fq 'server-monitor-manager-bootstrap-manifest.json' "$manifest_test" grep -Fq 'SMM_ALLOW_UNSIGNED=1' "$manifest_test" grep -Fq 'SMM_ALLOW_UNSIGNED=0' "$manifest_test" grep -Fq -- '--tlog-upload=false' "$manifest_test" +grep -Fq -- '--tlog-upload=false' "$root/tests/bootstrap/test-bootstrap-contract.sh" +grep -Fq 'server-monitor-manager-manifest.pem' "$root/tests/bootstrap/test-bootstrap-contract.sh" grep -Fq -- '--insecure-ignore-tlog' "$root/deploy/ochenstarik-server-monitor-manager.sh" grep -Fq 'verify_args=(--certificate "$certificate" --certificate-oidc-issuer "$COSIGN_ISSUER" --certificate-identity-regexp "$COSIGN_IDENTITY_REGEXP")' "$root/deploy/ochenstarik-server-monitor-manager.sh" grep -Fq 'verify-manifest MANIFEST SIGNATURE CERTIFICATE' "$root/deploy/ochenstarik-server-monitor-manager.sh"