I am trying to build Tomcat from source and I am curious about something.
On the Tomcat download page it say the following:
> "You must verify the integrity of the downloaded files."
Yet, the Tomcat build blindly downloads all kinds of sources that are not
verified in any way. ANT can do MD5 checksums. Shouldn't the Tomcat
properties file contain the checksums for the files it uses so they can be
verified after they are downloaded?
It seems to me that if file integrity is a concern, then all the files
should be check.
Here is a sample target:
-----------------------
<target name="-verify-checksum">
<checksum file="${filetoverify}" algorithm="MD5" property="${md5}"
verifyProperty="isEqual"/>
<fail message= "MD5 on ${filetoverify} is not ${md5}">
<condition>
<not>
<istrue value="${isEqual}"/>
</not>
</condition>
</fail>
</target>
And here would be how you call it:
---------------------------------
<antcall target="-verify-checksum" inheritall="false">
<param name="filetoverify" value="${archive.name}"/>
<param name="md5" value="${archive.md5}"/>
</antcall>
Thanks,
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
