NO-JIRA: tweaks for the release download helper script

- Verify the downloaded tar/zip files using their matching signature.
- Generate SHA512 checksum files for them.
- Update downloaded MD5 files to allow for simplified CLI tool checks.
- Run CLI tool checks on all the checksum files.
This commit is contained in:
Robbie Gemmell 2017-09-15 16:43:00 +01:00
parent 35bc64a0e1
commit b7b2960e1f
1 changed files with 14 additions and 2 deletions

View File

@ -50,8 +50,14 @@ doDownload () {
echo "Downloading $theFile.md5" echo "Downloading $theFile.md5"
curl $completeURL.md5 > $theFile.md5 curl $completeURL.md5 > $theFile.md5
echo "Downloading $theFile.sha1" echo "Verifying signature $theFile.asc"
curl $completeURL.sha1 > $theFile.sha1 gpg --verify $theFile.asc
echo "Augmenting $theFile.md5 with filename details"
echo " $theFile" >> $theFile.md5
echo "Generating SHA512 checksum file $theFile.sha512"
sha512sum $theFile > $theFile.sha512
} }
if [ "$#" != 3 ]; then if [ "$#" != 3 ]; then
@ -73,3 +79,9 @@ doDownload apache-artemis-$release-bin.zip
doDownload apache-artemis-$release-source-release.tar.gz doDownload apache-artemis-$release-source-release.tar.gz
doDownload apache-artemis-$release-source-release.zip doDownload apache-artemis-$release-source-release.zip
echo "Validating all MD5 checksum files"
md5sum -c *.md5
echo "Validating all SHA512 checksum files"
sha512sum -c *.sha512