diff --git a/Makefile b/Makefile index 0d89b147c..ecb2285c9 100644 --- a/Makefile +++ b/Makefile @@ -112,9 +112,6 @@ test: clean: go clean rm ./bin/${BINARY_NAME} - -clean-crl-server: - $(shell echo "Stopping CRL server..." && kill ${CRL_SERVER_PID}) .PHONY: deploy-demo deploy-demo: deploy-gatekeeper deploy-ratify deploy-demo-constraints diff --git a/test/bats/cli-test.bats b/test/bats/cli-test.bats index 3e99f821c..4f7a6e716 100644 --- a/test/bats/cli-test.bats +++ b/test/bats/cli-test.bats @@ -37,6 +37,10 @@ load helpers @test "notation verifier crl test" { run bin/ratify verify -c $RATIFY_DIR/config_notation_crl.json -s $TEST_REGISTRY/notation:crl assert_cmd_verify_success + + $(shell echo "Stopping CRL server..." && kill ${CRL_SERVER_PID}) + run bin/ratify verify -c $RATIFY_DIR/config_notation_crl.json -s $TEST_REGISTRY/notation:crl + assert_cmd_verify_failure } @test "notation verifier with type test" { diff --git a/test/bats/tests/config/config_notation_crl.json b/test/bats/tests/config/config_notation_crl.json index 88dcfb952..3fb4aea33 100644 --- a/test/bats/tests/config/config_notation_crl.json +++ b/test/bats/tests/config/config_notation_crl.json @@ -33,7 +33,7 @@ "*" ], "signatureVerification": { - "level": "audit" + "level": "strict" }, "trustStores": [ "ca:certs"