then:
        assertMetadataExists()
        hasModules(["org:bar", "org:foo"])
    }

    def "keys are exported properly when buildSrc is present"() {
        def keyring = newKeyRing()
        def keyring2 = newKeyRing()
        assert keyring.publicKey != keyring2.publicKey
        createMetadataFile {
            keyServer(keyServerFixture.uri)
        }

        given:
        javaLibrary()

        keyServerFixture.missingKey(keyId)
    }

    protected void serveValidKey() {
        keyServerFixture.withDefaultSigningKey()
    }

    protected SimpleKeyRing newKeyRing(PGPPublicKey mustBeAfter = SigningFixtures.validPublicKey) {
        def ring = createKeyRing()
        def minId = new BigInteger(Fingerprint.of(mustBeAfter).toString(), 16)

        where:
        stopInBetween << [false, true]
    }

    def "can verify classified artifacts downloaded in previous builds (stop in between = #stopInBetween)"() {
        def keyring = newKeyRing()
        keyServerFixture.registerPublicKey(keyring.publicKey)
        def pkId = Fingerprint.of(keyring.publicKey)

        given:
        terseConsoleOutput(false)
        javaLibrary()