OpenSearch/distribution/tools/plugin-cli
Ryan Ernst a1e7429ccc Allow sha512 checksum without filename for maven plugins (#52668)
When installing plugins from remote sources, either the Elastic download
service, or maven, a checksum file is downloaded and checked against the
downloaded zip. The current format for official plugins is to use a
sha512 checksum which includes the zip filename. This format matches
that from sha512sum, and allows using the --check argument there to
verify the checksum manually. However, when generating checksum files
with maven and gradle, the filename is not included.

This commit relaxes the requirement the filename existing within the
sha512 checksum file for maven plugins. We continue to strictly enforce
official plugins have the existing format of the file.

closes #52413
2020-02-24 13:38:20 -08:00
..
licenses Make plugin verification FIPS 140 compliant (#44266) 2019-07-12 14:34:15 +03:00
src Allow sha512 checksum without filename for maven plugins (#52668) 2020-02-24 13:38:20 -08:00
build.gradle Adjust jarHell and 3rd party audit exclusions (#51733) (#51766) 2020-02-10 07:38:59 +02:00