protected void serveMissingKey(String keyId = SigningFixtures.validPublicKeyHexString) {
        keyServerFixture.missingKey(keyId)
    }

    protected void serveValidKey() {
        keyServerFixture.withDefaultSigningKey()
    }

    protected SimpleKeyRing newKeyRing(PGPPublicKey mustBeAfter = SigningFixtures.validPublicKey) {
        def ring = createKeyRing()

        registerKey(longKeyId, keyFile)
        registerKey(fingerprint, keyFile)
    }

    private void registerKey(String keyId, File keyFile) {
        keyFiles[keyId] = keyFile
    }

    void withDefaultSigningKey() {
        File dir = baseDirectory.createDir("default-key")
        File publicKeyFile = new File(dir, "public-key.asc")
        publicKeyFile.deleteOnExit()
        SigningFixtures.writeValidPublicKeyTo(publicKeyFile)

        cleanup:
        secondServer.stop()
    }

    def "must verify all signatures (terse output=#terse)"() {
        def keyring = newKeyRing()
        keyServerFixture.withDefaultSigningKey()
        keyServerFixture.registerPublicKey(keyring.publicKey)
        def pkId = Fingerprint.of(keyring.publicKey)

        createMetadataFile {
            keyServer(keyServerFixture.uri)