Set pipefail

tests/release/fake.asc

@@ -0,0 +1,33 @@
+-----BEGIN PGP PRIVATE KEY BLOCK-----
+Version: GnuPG v1
+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+=E7MM
+-----END PGP PRIVATE KEY BLOCK-----

tests/release/fake.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

tests/release/fake.pub

@@ -0,0 +1,6 @@
+-----BEGIN PUBLIC KEY-----
+MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDw177VuRhTyfrX2QbJMCnj0zYJ
+ChmegRxCyZfEj7moTfLwABzg3KYdinmKITFGVlOYK+OKC4yzkUVWGzhuKyLEm4va
+zfXxzoAVMChorqL0u72lqSXjEd84qsmSML9ZZx5KLUOQU7o5vkKw+cIX8HLRF2QW
+TFHml4gN8MMTGSR+BQIDAQAB
+-----END PUBLIC KEY-----

tests/release/test.sh

@@ -0,0 +1,25 @@
+#!/bin/bash -e
+set -o pipefail
+release_test_dir=$(realpath $(dirname $0))
+release_openssl_privkey="$release_test_dir/fake.pem"
+export RELEASE_OPENSSL_PUBKEY="$release_test_dir/fake.pub"
+
+export GNUPGHOME=$(mktemp -d)
+gpg --import "$release_test_dir/fake.asc"
+export RELEASE_GPG_KEY=$(gpg --fingerprint | sed -n 's/ //g; s/.*fingerprint=\(\)/\1/p')
+
+cd $(mktemp -d)
+git clone --single-branch "$release_test_dir/../.." .
+release_num="0.99.0"
+git checkout -b "candidate-$release_num"
+
+need_sig=true
+yes | tools/release.sh --production $release_num 0.999.0 |
+while read line; do
+    if $need_sig && [ "$line" = "Verification Failure" ]; then
+        openssl dgst -sha256 -sign $release_openssl_privkey -out \
+            releases/le*/letsencrypt-auto-source/letsencrypt-auto.sig \
+            releases/le*/letsencrypt-auto-source/letsencrypt-auto
+        need_sig=false
+    fi
+done