go-github-selfupdate/selfupdate
Tobias Kohlbau 116dfa144d Add hash and signature validation
Go-self-update lacks support for checking integrity of downloaded files.
For more advanced situation it's necessary to validate the hash or
verify against public signatures. This patch adds support for
SHA2 hash and ECDSA PublicKey signature validation.
SHA2 uses file with suffix `.sha256`, whereas ECDSA uses
`.sig` file endings. See `selfupdate/validate_test.go` for examples.

Signed-off-by: Tobias Kohlbau <t.kohlbau@myopenfactory.com>
2018-11-09 11:21:21 +01:00
..
testdata Add hash and signature validation 2018-11-09 11:21:21 +01:00
detect.go Add hash and signature validation 2018-11-09 11:21:21 +01:00
detect_test.go Add support to pass custom version to fetch from Github 2018-03-13 09:16:15 +01:00
doc.go describe xz support in doc 2017-12-31 12:14:17 +09:00
e2e_test.go add tests for downloading and updating binary 2017-12-30 12:21:23 +09:00
log.go do not calculate header of log when disabled 2017-12-30 12:21:23 +09:00
log_test.go add more logs 2017-12-30 13:25:42 +09:00
release.go Add hash and signature validation 2018-11-09 11:21:21 +01:00
uncompress.go more logs on uncompressing archives 2018-01-01 19:35:39 +09:00
uncompress_test.go add tests for .tar.xz and .xz releases 2017-12-31 13:35:22 +09:00
update.go Add hash and signature validation 2018-11-09 11:21:21 +01:00
update_test.go add a test for private repositories 2018-01-20 00:34:50 +09:00
updater.go Add hash and signature validation 2018-11-09 11:21:21 +01:00
updater_test.go remove TestGitHubEnterpriseClientWithoutToken which is no longer valid due to 41acec2 2018-05-20 21:49:57 +09:00
validate.go Add hash and signature validation 2018-11-09 11:21:21 +01:00
validate_test.go Add hash and signature validation 2018-11-09 11:21:21 +01:00