Skip to content

Commit

Permalink
Added checksums for wix tools coming from sftp cache
Browse files Browse the repository at this point in the history
Just to be sure if sftp cache is compromised, fail if checksums don't match.

Ticket: ENT-10801
Changelog: none
  • Loading branch information
craigcomstock committed Oct 25, 2023
1 parent 5642cde commit 61b06f2
Showing 1 changed file with 6 additions and 1 deletion.
7 changes: 6 additions & 1 deletion build-scripts/package-msi
Original file line number Diff line number Diff line change
Expand Up @@ -17,8 +17,13 @@ else
echo '
get /export/images/windows/wix310-binaries.zip
get /export/images/windows/wine-folder.tar.xz
' | sftp -i ~/.ssh/build_artifacts_cache.id_rsa -b - [email protected]
' | sftp -b - [email protected]

# check checksums
sha256sum -c - <<EOF || exit 42
493145b3fac22bdf8c55142a9f96ef8136d56b38d78a2322f13f1ba11f9cf2f8 wix310-binaries.zip
3510fd8c4ecb4a9c479dfe43849183c666f9e41b019fc7135dc8735d0032d16e wine-folder.tar.xz
EOF
# Install Wix tools
mkdir -p "$WIXPATH"
cd "$WIXPATH" || exit
Expand Down

0 comments on commit 61b06f2

Please sign in to comment.