(List
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('test_description', {[SQ <LIT_CHARS "signed push">]})])
  (Com {[LIT_CHARS .]} {[LIT_CHARS ./test-lib.sh]})
  (Com {[LIT_CHARS .]} {[DQ [VarSub TEST_DIRECTORY]] [LIT_CHARS /lib-gpg.sh]})
  (FunctionDef prepare_dst []
    (AndOr OP_AND_IF
      (Com {[LIT_CHARS rm]} {[LIT_CHARS -fr]} {[LIT_CHARS dst]})
      (AndOr OP_AND_IF
        (Com {[LIT_CHARS test_create_repo]} {[LIT_CHARS dst]})
        (Com {[LIT_CHARS git]} {[LIT_CHARS push]} {[LIT_CHARS dst]} {[LIT_CHARS master] [LIT_OTHER ":"] [LIT_CHARS noop]} {[LIT_CHARS master] [LIT_OTHER ":"] [LIT_CHARS ff]} {[LIT_CHARS master] [LIT_OTHER ":"] [LIT_CHARS noff]})
      )
    )
  )
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS setup]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\t# master, ff and noff branches pointing at the same commit\n"> <LIT_CHARS "\ttest_tick &&\n"> <LIT_CHARS "\tgit commit --allow-empty -m initial &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tgit checkout -b noop &&\n"> <LIT_CHARS "\tgit checkout -b ff &&\n"> <LIT_CHARS "\tgit checkout -b noff &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\t# noop stays the same, ff advances, noff rewrites\n"> <LIT_CHARS "\ttest_tick &&\n"> <LIT_CHARS "\tgit commit --allow-empty --amend -m rewritten &&\n"> <LIT_CHARS "\tgit checkout ff &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\ttest_tick &&\n"> <LIT_CHARS "\tgit commit --allow-empty -m second\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "unsigned push does not send push certificate">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tprepare_dst &&\n"> <LIT_CHARS "\tmkdir -p dst/.git/hooks &&\n"> <LIT_CHARS "\twrite_script dst/.git/hooks/post-receive <<-\\EOF &&\n"> <LIT_CHARS "\t# discard the update list\n"> <LIT_CHARS "\tcat >/dev/null\n"> <LIT_CHARS "\t# record the push certificate\n"> <LIT_CHARS "\tif test -n \"${GIT_PUSH_CERT-}\"\n"> <LIT_CHARS "\tthen\n"> <LIT_CHARS "\t\tgit cat-file blob $GIT_PUSH_CERT >../push-cert\n"> <LIT_CHARS "\tfi\n"> <LIT_CHARS "\tEOF\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tgit push dst noop ff +noff &&\n"> <LIT_CHARS "\t! test -f dst/push-cert\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "talking with a receiver without push certificate support">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tprepare_dst &&\n"> <LIT_CHARS "\tmkdir -p dst/.git/hooks &&\n"> <LIT_CHARS "\twrite_script dst/.git/hooks/post-receive <<-\\EOF &&\n"> <LIT_CHARS "\t# discard the update list\n"> <LIT_CHARS "\tcat >/dev/null\n"> <LIT_CHARS "\t# record the push certificate\n"> <LIT_CHARS "\tif test -n \"${GIT_PUSH_CERT-}\"\n"> <LIT_CHARS "\tthen\n"> <LIT_CHARS "\t\tgit cat-file blob $GIT_PUSH_CERT >../push-cert\n"> <LIT_CHARS "\tfi\n"> <LIT_CHARS "\tEOF\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tgit push dst noop ff +noff &&\n"> <LIT_CHARS "\t! test -f dst/push-cert\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "push --signed fails with a receiver without push certificate support">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tprepare_dst &&\n"> <LIT_CHARS "\tmkdir -p dst/.git/hooks &&\n"> <LIT_CHARS "\ttest_must_fail git push --signed dst noop ff +noff 2>err &&\n"> <LIT_CHARS "\ttest_i18ngrep \"the receiving end does not support\" err\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS GPG]} {[SQ <LIT_CHARS "no certificate for a signed push with no update">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tprepare_dst &&\n"> <LIT_CHARS "\tmkdir -p dst/.git/hooks &&\n"> <LIT_CHARS "\twrite_script dst/.git/hooks/post-receive <<-\\EOF &&\n"> <LIT_CHARS "\tif test -n \"${GIT_PUSH_CERT-}\"\n"> <LIT_CHARS "\tthen\n"> <LIT_CHARS "\t\tgit cat-file blob $GIT_PUSH_CERT >../push-cert\n"> <LIT_CHARS "\tfi\n"> <LIT_CHARS "\tEOF\n"> <LIT_CHARS "\tgit push dst noop &&\n"> <LIT_CHARS "\t! test -f dst/push-cert\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS GPG]} {[SQ <LIT_CHARS "signed push sends push certificate">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tprepare_dst &&\n"> <LIT_CHARS "\tmkdir -p dst/.git/hooks &&\n"> <LIT_CHARS "\tgit -C dst config receive.certnonceseed sekrit &&\n"> <LIT_CHARS "\twrite_script dst/.git/hooks/post-receive <<-\\EOF &&\n"> <LIT_CHARS "\t# discard the update list\n"> <LIT_CHARS "\tcat >/dev/null\n"> <LIT_CHARS "\t# record the push certificate\n"> <LIT_CHARS "\tif test -n \"${GIT_PUSH_CERT-}\"\n"> <LIT_CHARS "\tthen\n"> <LIT_CHARS "\t\tgit cat-file blob $GIT_PUSH_CERT >../push-cert\n"> <LIT_CHARS "\tfi &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tcat >../push-cert-status <<E_O_F\n"> <LIT_CHARS "\tSIGNER=${GIT_PUSH_CERT_SIGNER-nobody}\n"> <LIT_CHARS "\tKEY=${GIT_PUSH_CERT_KEY-nokey}\n"> <LIT_CHARS "\tSTATUS=${GIT_PUSH_CERT_STATUS-nostatus}\n"> <LIT_CHARS "\tNONCE_STATUS=${GIT_PUSH_CERT_NONCE_STATUS-nononcestatus}\n"> <LIT_CHARS "\tNONCE=${GIT_PUSH_CERT_NONCE-nononce}\n"> <LIT_CHARS "\tE_O_F\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tEOF\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tgit push --signed dst noop ff +noff &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\t(\n"> <LIT_CHARS "\t\tcat <<-\\EOF &&\n"> <LIT_CHARS "\t\tSIGNER=C O Mitter <committer@example.com>\n"> <LIT_CHARS "\t\tKEY=13B6F51ECDDE430D\n"> <LIT_CHARS "\t\tSTATUS=G\n"> <LIT_CHARS "\t\tNONCE_STATUS=OK\n"> <LIT_CHARS "\t\tEOF\n"> <LIT_CHARS "\t\tsed -n -e \"s/^nonce /NONCE=/p\" -e \"/^$/q\" dst/push-cert\n"> <LIT_CHARS "\t) >expect &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tgrep \"$(git rev-parse noop ff) refs/heads/ff\" dst/push-cert &&\n"> <LIT_CHARS "\tgrep \"$(git rev-parse noop noff) refs/heads/noff\" dst/push-cert &&\n"> <LIT_CHARS "\ttest_cmp expect dst/push-cert-status\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS GPG]} {[SQ <LIT_CHARS "fail without key and heed user.signingkey">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tprepare_dst &&\n"> <LIT_CHARS "\tmkdir -p dst/.git/hooks &&\n"> <LIT_CHARS "\tgit -C dst config receive.certnonceseed sekrit &&\n"> <LIT_CHARS "\twrite_script dst/.git/hooks/post-receive <<-\\EOF &&\n"> <LIT_CHARS "\t# discard the update list\n"> <LIT_CHARS "\tcat >/dev/null\n"> <LIT_CHARS "\t# record the push certificate\n"> <LIT_CHARS "\tif test -n \"${GIT_PUSH_CERT-}\"\n"> <LIT_CHARS "\tthen\n"> <LIT_CHARS "\t\tgit cat-file blob $GIT_PUSH_CERT >../push-cert\n"> <LIT_CHARS "\tfi &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tcat >../push-cert-status <<E_O_F\n"> <LIT_CHARS "\tSIGNER=${GIT_PUSH_CERT_SIGNER-nobody}\n"> <LIT_CHARS "\tKEY=${GIT_PUSH_CERT_KEY-nokey}\n"> <LIT_CHARS "\tSTATUS=${GIT_PUSH_CERT_STATUS-nostatus}\n"> <LIT_CHARS "\tNONCE_STATUS=${GIT_PUSH_CERT_NONCE_STATUS-nononcestatus}\n"> <LIT_CHARS "\tNONCE=${GIT_PUSH_CERT_NONCE-nononce}\n"> <LIT_CHARS "\tE_O_F\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tEOF\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tunset GIT_COMMITTER_EMAIL &&\n"> <LIT_CHARS "\tgit config user.email hasnokey@nowhere.com &&\n"> <LIT_CHARS "\ttest_must_fail git push --signed dst noop ff +noff &&\n"> <LIT_CHARS "\tgit config user.signingkey committer@example.com &&\n"> <LIT_CHARS "\tgit push --signed dst noop ff +noff &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\t(\n"> <LIT_CHARS "\t\tcat <<-\\EOF &&\n"> <LIT_CHARS "\t\tSIGNER=C O Mitter <committer@example.com>\n"> <LIT_CHARS "\t\tKEY=13B6F51ECDDE430D\n"> <LIT_CHARS "\t\tSTATUS=G\n"> <LIT_CHARS "\t\tNONCE_STATUS=OK\n"> <LIT_CHARS "\t\tEOF\n"> <LIT_CHARS "\t\tsed -n -e \"s/^nonce /NONCE=/p\" -e \"/^$/q\" dst/push-cert\n"> <LIT_CHARS "\t) >expect &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tgrep \"$(git rev-parse noop ff) refs/heads/ff\" dst/push-cert &&\n"> <LIT_CHARS "\tgrep \"$(git rev-parse noop noff) refs/heads/noff\" dst/push-cert &&\n"> <LIT_CHARS "\ttest_cmp expect dst/push-cert-status\n">]})
  (Com {[LIT_CHARS test_done]})
)