Ability to validate checksum and/or file size of archive

voxpupuli / puppet-staging

⛔️ Deprecated in favor of puppet-archive

https://forge.puppet.com/puppet/archive

Apache License 2.0

51 stars 109 forks source link

Closed XANi closed 9 years ago

XANi commented 9 years ago

For two reasons:

Connecting to server via HTTPS doesn't mean the target file was not tampered with and checking checksum can prevent it
If target file is either "in middle of uploading" or incomplete for some other reason (corrupted disk etc.) it should not load it.

nanliu commented 9 years ago

There are ways to provide checksum, but it's rather cumbersome. This is the reason there's a type/provider replacement: https://github.com/puppet-community/puppet-archive