4 Commits

Author	SHA1	Message	Date
Andrey Smirnov	cafb89f30f	Re-work the way checksum matching works against Release file ... Break up URL into base part and relative path. Match checksum against relative path and never against full URL. This might be fixing security issue if aptly was incorrectly matching against wrong part of Release file.	2017-05-23 03:00:15 +03:00
Andrey Smirnov	f0360cf2d3	Use longest suffix match to pick up checksum	2017-05-23 03:00:15 +03:00
Andrey Smirnov	51213899b7	More Go linters enabled, issues fixed ... Ref: #528 Enables "staticcheck", "varcheck", "structcheck", "aligncheck"	2017-05-03 18:23:14 +03:00
Andrey Smirnov	94b49818a1	Refactor HTTP downloader package ... * Drop multi-threaded downloader. It doesn't really belong here - some places require it, some do not, but it's definitely not the right place to handle it, as it's being used only when updating mirrors * Pass expectedChecksums as pointer, so it's easy to drive `nil` value, and also downloader can fill back checksums (not implemented right now). * Break down downloader and tests into more files * Use pkg/errors instead of fmt	2017-04-26 23:17:03 +03:00