From 1949be644cff80c7d9d45215a8042e657b8e1087 Mon Sep 17 00:00:00 2001
From: Max Romanov <max.romanov@nginx.com>
Date: Tue, 28 Jan 2020 17:02:51 +0300
Subject: Java: introducing SHA512 sum validation for external JARs.

---
 auto/modules/java_get_jar | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

(limited to 'auto/modules/java_get_jar')

diff --git a/auto/modules/java_get_jar b/auto/modules/java_get_jar
index 52cd146f..81b300f9 100644
--- a/auto/modules/java_get_jar
+++ b/auto/modules/java_get_jar
@@ -13,13 +13,23 @@ NXT_JAR_LOCAL="${NXT_JAR_LOCAL_DIR}/${NXT_JAR_FILE}"
 NXT_JAR_LOCAL_TMP="${NXT_JAR_LOCAL_DIR}/.${NXT_JAR_FILE}.$$"
 NXT_JAR_URL=${NXT_JAR_REPO}${NXT_JAR_NAMESPACE}${NXT_JAR_NAME}/${NXT_JAR_VERSION}/${NXT_JAR_FILE}
 
+NXT_JAR_CHK_FILE="$NXT_BUILD_DIR/$NXT_JAR_FILE"
+. auto/modules/java_chk_sha512
+
 if [ ! -f "$NXT_BUILD_DIR/$NXT_JAR_FILE" ]; then
-    if [ ! -f "$NXT_JAR_LOCAL" ]; then
+    NXT_JAR_CHK_FILE=$NXT_JAR_LOCAL
+    . auto/modules/java_chk_sha512
+
+    if [ ! -f "${NXT_JAR_LOCAL}" ]; then
         $echo "getting remote $NXT_JAR_FILE ... "
         $echo "getting remote $NXT_JAR_FILE ..." >> $NXT_AUTOCONF_ERR
 
         mkdir -p "${NXT_JAR_LOCAL_DIR}"
         curl --progress-bar "$NXT_JAR_URL" -o "$NXT_JAR_LOCAL_TMP"
+
+        NXT_JAR_CHK_FILE=$NXT_JAR_LOCAL_TMP
+        . auto/modules/java_chk_sha512
+
         mv "$NXT_JAR_LOCAL_TMP" "$NXT_JAR_LOCAL"
     else
         $echo "getting local $NXT_JAR_FILE"
-- 
cgit