view release on metacpan or  search on metacpan

SIGNATURE  view on Meta::CPAN

This file contains message digests of all files listed in MANIFEST,
signed via the Module::Signature module, version 0.88.

To verify the content in this distribution, first make sure you have
Module::Signature installed, then type:

    % cpansign -v

It will check each file's integrity, as well as the signature's
validity.  If "==> Signature verified OK! <==" is not displayed,
the distribution may already have been compromised, and you should
not run its Makefile.PL or Build.PL.

-----BEGIN PGP SIGNED MESSAGE-----

t/91.signature.t  view on Meta::CPAN

my $keyserver = $ENV{MODULE_SIGNATURE_KEYSERVER} || 'keyserver.ubuntu.com';
if( $ENV{AUTHOR_TESTING} < 2 )
{
    plan skip_all => 
      "Set the environment variable AUTHOR_TESTING to enable this test.";
}
elsif( !eval{ require Module::Signature; 1 } )
{
    plan skip_all => 
      "Next time around, consider installing Module::Signature, ".
      "so you can verify the integrity of this distribution.";
}
elsif( !-e 'SIGNATURE' )
{
    plan skip_all => "SIGNATURE not found";
}
elsif( -s 'SIGNATURE' == 0 )
{
    plan skip_all => "SIGNATURE file empty";
}
elsif( !eval { require Socket; Socket::inet_aton($keyserver) } )
{
    plan skip_all => "Cannot connect to the keyserver to check module ".
                     "signature";
}
else
{
    plan tests => 1;
}

my $ret = Module::Signature::verify();
SKIP:
{
    skip "Module::Signature cannot verify", 1 
      if $ret eq Module::Signature::CANNOT_VERIFY();

    cmp_ok $ret, '==', Module::Signature::SIGNATURE_OK(), "Valid signature";
}