From 38d8c1231d6269e32e4e4a47915c7c8915f339b8 Mon Sep 17 00:00:00 2001
From: Darshan Sen <raisinten@gmail.com>
Date: Fri, 14 Oct 2022 12:00:19 +0530
Subject: [PATCH] test: add test for code signing on macOS

Signed-off-by: Darshan Sen <raisinten@gmail.com>
---
 test/cli.mjs | 74 +++++++++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 73 insertions(+), 1 deletion(-)

diff --git a/test/cli.mjs b/test/cli.mjs
index 7ec1ce6..fbe0f0e 100644
--- a/test/cli.mjs
+++ b/test/cli.mjs
@@ -2,7 +2,7 @@ import { createRequire } from "module";
 const require = createRequire(import.meta.url);
 const { inject } = require("..");
 
-import { spawnSync } from "child_process";
+import { spawnSync, execSync } from "child_process";
 import * as crypto from "crypto";
 import * as path from "path";
 import * as os from "os";
@@ -84,6 +84,24 @@ describe("postject CLI", () => {
       expect(status).to.equal(0);
     }
 
+    // Verifying code signing using a self-signed certificate.
+    {
+      if (process.platform === "darwin") {
+        let codesignFound = false;
+        try {
+          execSync("command -v codesign");
+          codesignFound = true;
+        } catch (err) {
+          console.log(err.message);
+        }
+        if (codesignFound) {
+          execSync(`codesign --sign - ${filename}`);
+          execSync(`codesign --verify ${filename}`);
+        }
+      }
+      // TODO(RaisinTen): Test code signing on Windows.
+    }
+
     // After injection
     {
       const { status, stdout } = spawnSync(filename, { encoding: "utf-8" });
@@ -138,6 +156,24 @@ describe("postject API", () => {
       await inject(filename, "foobar", resourceData);
     }
 
+    // Verifying code signing using a self-signed certificate.
+    {
+      if (process.platform === "darwin") {
+        let codesignFound = false;
+        try {
+          execSync("command -v codesign");
+          codesignFound = true;
+        } catch (err) {
+          console.log(err.message);
+        }
+        if (codesignFound) {
+          execSync(`codesign --sign - ${filename}`);
+          execSync(`codesign --verify ${filename}`);
+        }
+      }
+      // TODO(RaisinTen): Test code signing on Windows.
+    }
+
     // After injection
     {
       const { status, stdout } = spawnSync(filename, { encoding: "utf-8" });
@@ -183,6 +219,24 @@ describe("Inject data into Node.js using CLI", () => {
       expect(status).to.equal(0);
     }
 
+    // Verifying code signing using a self-signed certificate.
+    {
+      if (process.platform === "darwin") {
+        let codesignFound = false;
+        try {
+          execSync("command -v codesign");
+          codesignFound = true;
+        } catch (err) {
+          console.log(err.message);
+        }
+        if (codesignFound) {
+          execSync(`codesign --sign - ${filename}`);
+          execSync(`codesign --verify ${filename}`);
+        }
+      }
+      // TODO(RaisinTen): Test code signing on Windows.
+    }
+
     // After injection
     {
       const { status } = spawnSync(filename, ["-e", "process.exit()"], {
@@ -222,6 +276,24 @@ describe("Inject data into Node.js using API", () => {
       await inject(filename, "foobar", resourceData);
     }
 
+    // Verifying code signing using a self-signed certificate.
+    {
+      if (process.platform === "darwin") {
+        let codesignFound = false;
+        try {
+          execSync("command -v codesign");
+          codesignFound = true;
+        } catch (err) {
+          console.log(err.message);
+        }
+        if (codesignFound) {
+          execSync(`codesign --sign - ${filename}`);
+          execSync(`codesign --verify ${filename}`);
+        }
+      }
+      // TODO(RaisinTen): Test code signing on Windows.
+    }
+
     // After injection
     {
       const { status } = spawnSync(filename, ["-e", "process.exit()"], {