Commit Graph

7 Commits

Author SHA1 Message Date
Tobias Kohlbau 116dfa144d Add hash and signature validation
Go-self-update lacks support for checking integrity of downloaded files.
For more advanced situation it's necessary to validate the hash or
verify against public signatures. This patch adds support for
SHA2 hash and ECDSA PublicKey signature validation.
SHA2 uses file with suffix `.sha256`, whereas ECDSA uses
`.sig` file endings. See `selfupdate/validate_test.go` for examples.

Signed-off-by: Tobias Kohlbau <t.kohlbau@myopenfactory.com>
2018-11-09 11:21:21 +01:00
Jean-Baptiste Farez 05a876f32d Fix go-github int64 requirements (#9) 2018-02-02 18:07:47 +09:00
rhysd 6b4eeadeb7 download an asset via GitHub Releases API by default 2018-01-19 13:30:23 +09:00
rhysd f6766d9880 add more information to Release struct
- asset's size
- release name
- release time
2017-12-31 17:36:46 +09:00
rhysd 0c3940241c tweak fields of Release struct and add docs for them 2017-12-28 17:39:13 +09:00
rhysd b709a54c2d add document URL and description to Release struct 2017-12-27 12:16:26 +09:00
rhysd 7cdec8424f consider draft/prerelease and remember asset URL 2017-12-26 18:45:52 +09:00