Function testTamperingDetection

test/sign.e2e.test.ts:377–397

* Test tampering detection

()

 * Test tampering detection
 */
async function testTamperingDetection() {
  // Create a copy and sign it
  const testFile = path.join(TEST_DIR, "test-tampered.dxt");
  fs.copyFileSync(TEST_MCPB, testFile);
  signMcpbFile(testFile, SELF_SIGNED_CERT, SELF_SIGNED_KEY);

  // Read the signed file
  const signedContent = fs.readFileSync(testFile);

  // Tamper with the content (change a byte in the ZIP portion)
  const tamperedContent = Buffer.from(signedContent);
  tamperedContent[10] = (tamperedContent[10] + 1) % 256;
  fs.writeFileSync(testFile, tamperedContent);

  // Try to verify - should fail
  const result = await verifyMcpbFile(testFile);
  expect(result.status).toBe("unsigned");

  // Clean up
  fs.unlinkSync(testFile);
}

/**
 * Test unsigned file verification