From a49a45f85e9fac710754810fb0c0185892c078f7 Mon Sep 17 00:00:00 2001
From: Robert James Hernandez <rob@sarcasticadmin.com>
Date: Sun, 15 Sep 2024 16:52:45 +0000
Subject: [PATCH] scion: individually verify certs in vmTest

---
 nixos/tests/scion/freestanding-deployment/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/nixos/tests/scion/freestanding-deployment/default.nix b/nixos/tests/scion/freestanding-deployment/default.nix
index ba0effecc1a0..ff022b34dde6 100644
--- a/nixos/tests/scion/freestanding-deployment/default.nix
+++ b/nixos/tests/scion/freestanding-deployment/default.nix
@@ -193,6 +193,9 @@ in
     # Wait for scion-control.service on all instances
     wait_for_unit("scion-control.service")
 
+    # Ensure cert is valid against TRC
+    succeed("scion-pki certificate verify --trc /etc/scion/certs/*.trc /etc/scion/crypto/as/*.pem >&2")
+
     # Execute pingAll command on all instances
     succeed("${pingAll} >&2")