SynologyOpenSource / pkgscripts-ng

Synology DSM6.0 package toolkit framework
162 stars 56 forks source link

Validate downloded tarballs #32

Closed felfert closed 1 year ago

felfert commented 3 years ago

This PR adds MD5 checksum validation of downloaded tarballs. If a tarball already exists locally AND it's checksum verifies, then the download is skipped completely. The method _fetch_md5sums relies on SourceForge-specific json metadata, supplied in the index page. It could be generalized and simplified significantly, IF Synology would provide some md5sum.json file at the download-site.

Cheers -Fritz