[
https://issues.jboss.org/browse/JBDS-3778?page=com.atlassian.jira.plugin....
]
Nick Boldt updated JBDS-3778:
-----------------------------
Description:
When downloading from remote site anything can happen, installer build and installer
itself should verify checksum for downloaded resources.
* add method createSHA256(file) into gulpfile.js to create sha256 checksum for file
* here is an example
http://www.hacksparrow.com/how-to-generate-md5-sha1-sha512-sha256-checksu...
* then we will need to create SHA256 for vagrant and virtualBox or download them if they
are available
* and then we can skip downloading if it's already on disk
Request comes from Product Security team.
was:When downloading from remote site anything can happen, installer build and installer
itself should verify checksum for downloaded resources.
Add checksum verification for downloaded resources
--------------------------------------------------
Key: JBDS-3778
URL:
https://issues.jboss.org/browse/JBDS-3778
Project: Developer Studio (JBoss Developer Studio)
Issue Type: Bug
Components: installer
Affects Versions: 9.1.0.GA
Reporter: Denis Golovin
Assignee: Nick Boldt
Priority: Blocker
Labels: Havoc
Fix For: 9.1.0.GA
When downloading from remote site anything can happen, installer build and installer
itself should verify checksum for downloaded resources.
* add method createSHA256(file) into gulpfile.js to create sha256 checksum for file
* here is an example
http://www.hacksparrow.com/how-to-generate-md5-sha1-sha512-sha256-checksu...
* then we will need to create SHA256 for vagrant and virtualBox or download them if they
are available
* and then we can skip downloading if it's already on disk
Request comes from Product Security team.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)