[Freedombox-discuss] FreedomBuddy Testing

[Tom Galloway]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Nick has raised an issue on FreedomBuddy that there should be some
tests available to confirm what FreedomBuddy does with data that has
been signed/encrypted by expired GPG keys.

I've been able to confirm that FreedomBuddy correctly handles this
situation by not decrypting the data but I've been unable to create a
repeatable test to cover this issue.

The closest I got was to create a GPG key with an expiry date of
tomorrow. The test would then be able to decrypt the data (TEST FAIL)
until tomorrow+1 when it would stop decrypting the data (TEST PASS).

This means that the test is repeatable but only 2 days after the GPG
key was created which isn't ideal.

Does anyone on the list know of a way of being able to test this?

Cheers,
Tom
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
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=y29z
-----END PGP SIGNATURE-----