Run pkcs7 signedData stream through make check so it asserts the real verify result

Author: aidangarske

.github/examples-manifest.yml

@@ -266,10 +266,8 @@ examples:
     profile: pkcs7
     wolfssl_ref: master
     deps: [zlib1g-dev]
-    run:
-      # last line of the real path; the not-compiled-in branch returns 0 without it
-      - exec: [./signedData-stream, content.txt]
-        expect: "bytes from file"
+    # make check asserts the real verify result, not a mid-stream "bytes from file"
+    mode: check
 
   # Both commands come from pkcs7/README.md "Creating an SMIME bundle and
   # verifying it"; smime-verify consumes the bundle smime writes.

pkcs7/Makefile

@@ -57,10 +57,11 @@ clean:
         authEnvelopedDataKARI.der authEnvelopedDataKTRI.der \
         authEnvelopedDataORI.der authEnvelopedDataPWRI.der encryptedData.der \
         authEnvelopedDataKEKRI.der compressedData.der \
-        smime-created.p7s
+        smime-created.p7s stream.log
 
-check: SHELL := /bin/bash
-check: .SHELLFLAGS := -eo pipefail -c
+# Redirect then grep (no pipe) so signedData-stream's nonzero exit fails the
+# recipe, there is no SIGPIPE on the dump, and it works under BSD make too.
 check: signedData-stream
-	./signedData-stream content.txt | grep -q 'Successfully verified SignedData bundle'
+	./signedData-stream content.txt > stream.log
+	grep -q 'Successfully verified SignedData bundle' stream.log
 	@echo "PASS: pkcs7-signeddata-stream checks"