Skip to content

Draft: Check checksums before extracting zip

Festerdam requested to merge Festerdam/hourglass:checksums into master

EDIT: If the code of this MR is significant enough to be subjected to copyright, I'm licensing it under the MIT, since I'm planning on using some of this code in another MR for another MIT-licensed project. There shouldn't be any problem in including MIT code in a GPL licensed project, while it can be quite problematic to include GPL code in an MIT project, that's why I'm doing this.

This merge request adds support for checking Godot's SHA-512 checksums. It is done by using the command line tools offered by the operating systems, such as sha512sum on Linux, and certutil on Windows.

Progress:

  • Checksum checking on Linux
  • Checksum checking on Windows
  • Checksum checking on OS X

In the future we should also check the signatures of the checksums if they ever become a thing (https://github.com/godotengine/godot-proposals/issues/6042).

This MR depends on !43.

Edited by Festerdam

Merge request reports