Function testCASignedSigning

test/sign.e2e.test.ts:354–372

* Test signing with CA-signed certificate

()

 * Test signing with CA-signed certificate
 */
async function testCASignedSigning() {
  // Create a copy for this test
  const testFile = path.join(TEST_DIR, "test-ca-signed.dxt");
  fs.copyFileSync(TEST_MCPB, testFile);

  // Sign the file with intermediate
  expect(() =>
    signMcpbFile(testFile, SIGNED_CERT, SIGNED_KEY, [CA_CERT]),
  ).not.toThrow();

  // Verify the signature
  const result = await verifyMcpbFile(testFile);

  // CA-signed status depends on whether test CA is trusted by OS
  expect(["signed", "unsigned"]).toContain(result.status);

  // Clean up
  fs.unlinkSync(testFile);
}

/**
 * Test tampering detection