Cachable, proxy-friendly selendroid jar download.

jgreen210 commented 8 years ago

Download using http from maven central, not https from github. Using http avoids many proxy-related problems and makes caching easier. Not using github means can use http and also avoids a redirection to a temporary and therefore extra-hard-to-cache URL.
Download via temporary file, throwing exception if fail, to ensure other code can't see bad download.
Use SHA256 not MD5 fingerprint, to compensate for use of http.
Only check fingerprint on download, but fail if it is wrong instead of just logging warning.

jgreen210 commented 8 years ago

Fixes https://github.com/appium/appium-selendroid-driver/issues/24 and also allows me to cache the download with an HTTP proxy.

jgreen210 commented 8 years ago

This travis build failed when installing appium-selendroid-driver:

https://travis-ci.org/appium/appium-selendroid-driver/jobs/158700317 https://s3.amazonaws.com/archive.travis-ci.org/jobs/158700317/log.txt

...saying:

Error: bad SHA256 fingerprint: 7cbc32cb03411d9714878cb390f1f93ecb9ec76f11341c47827c00dfa7a06c42

It then tries to run the unit tests anyway, which fail since there's no apk or manifest.

When I download the jar locally, I still get the checked-in fingerprints:

$ curl --silent --location https://github.com/selendroid/selendroid/releases/download/0.17.0/selendroid-standalone-0.17.0-with-dependencies.jar | md5sum -
5e1f7de5e4d2eb77b68675d76c5edf6a  -
$ curl --silent --location https://github.com/selendroid/selendroid/releases/download/0.17.0/selendroid-standalone-0.17.0-with-dependencies.jar | shasum --algorithm 256 -
7cf7163ac47f1c46eff95b62f78b58c1dabdec534acc6632da3784739f6e9d82  -
$ curl --silent http://repo1.maven.org/maven2/io/selendroid/selendroid-standalone/0.17.0/selendroid-standalone-0.17.0-with-dependencies.jar | shasum --algorithm 256
7cf7163ac47f1c46eff95b62f78b58c1dabdec534acc6632da3784739f6e9d82  -