The Perl Toolchain Summit needs more sponsors. If your company depends on Perl, please support this very important event.
#!/usr/bin/perl

# Test if the modules signature is valid.
use warnings;
use strict;
use Test::More;

if ( !$ENV{TEST_SIGNATURE} ) {
    plan skip_all =>
      'Set the environment variable TEST_SIGNATURE to enable this test.';
}

elsif ( !eval { require Module::Signature; 1 } ) {
    plan skip_all => 'Next time around, consider install Module::Signature, '
      . 'so you can verify the integrity of this distribution.';
}
elsif ( !-e 'SIGNATURE' ) {
    plan skip_all => 'SIGNATURE not found';
}
elsif ( -s 'SIGNATURE' == 0 ) {
    plan skip_all => 'SIGNATURE file empty';
}
elsif ( !eval { require Socket; Socket::inet_aton('pool.sks-keyservers.net') } )
{
    plan skip_all =>
      'Cannot connect to the keyserver to check module signature';
}
else {
    plan tests => 1;
}

my $ret = Module::Signature::verify();
SKIP: {
    skip 'Module::Signature cannot verify', 1
      if $ret eq Module::Signature::CANNOT_VERIFY();

    cmp_ok $ret, '==', Module::Signature::SIGNATURE_OK(), 'Valid signature';
}