Signing test reports and verifying their authenticity¶

By signing the test reports it can be proven that the result of a package run or project run was not manipulated subsequently.

Signing a test report¶

Open a package and run it.

ecu.test creates a test report file (*.trf). Besides the actual test results this file contains a signature that makes manipulations outside of ecu.test visible.

Verifying the authenticity of a test report¶

Opening of a non-manipulated test report

Select the created test report file via File ‣ Open ‣ Test report.

ecu.test verifies the test report based on the contained signature.

The result of the successfull verification shown in a green bar above the content of the test report.

Opening of a manipulated test report

Had the file been changed unauthorized ecu.test would show a warning dialog indicating the invalidity of the signature. After confirming with Yes the report is shown nevertheless. Above the report results a yellow bar then appears with a warning.