initial commit

2 files changed, 38 insertions, 0 deletions

diff --git a/t/keyids-complete.t b/t/keyids-complete.t
new file mode 100755
index 0000000..169208c
--- /dev/null
+++ b/t/keyids-complete.t
@@ -0,0 +1,19 @@
+#!/bin/sh
+# Makes sure every key in nwt-maintainers-gpg has an entry in the
+# keyids mapping file.
+set -e
+
+fail=0
+
+for keyring in itzks-maintainers-gpg itzks-keyring-gpg; do
+	cd $keyring
+	for key in 0x*; do
+		if ! grep -q "^$key " ../keyids; then
+			echo "$keyring: $key is not in keyids file."
+			fail=1
+		fi
+	done
+	cd ..
+done
+
+exit $fail
diff --git a/t/no-expired.t b/t/no-expired.t
new file mode 100755
index 0000000..f3934dc
--- /dev/null
+++ b/t/no-expired.t
@@ -0,0 +1,19 @@
+#!/bin/sh
+# Looks for expired keys in our active keyrings
+set -e
+
+find_expired () {
+	k=$1
+	gpg --no-options --no-auto-check-trustdb --no-default-keyring \
+		--keyring "./output/keyrings/$k" --list-keys --with-colons \
+		| grep '^pub' \
+		| awk -F: --assign keyring=$1 \
+		'$2 == "e" {print keyring ":\t0x" $5 " expired on " $7}'
+}
+
+fail=0
+for keyring in itzks-maintainers.gpg itzks-keyring.gpg; do
+	find_expired $keyring
+done
+
+exit $fail