[
https://issues.apache.org/jira/browse/FLEX-33195?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13451833#comment-13451833
]
Erik de Bruin commented on FLEX-33195:
--------------------------------------
The source for the MD5 comparison can be found here:
http://svn.apache.org/repos/asf/incubator/flex/utilities/trunk/installer/src/org/apache/flex/packageflexsdk/util/MD5CompareUtil.as
This helper class uses the MD5Stream class from 'as3corelib'
(https://github.com/mikechambers/as3corelib) to verify the MD5 signature of a
FileStream created from the downloaded package.
> InstallApacheFlex mechanism to check digests on downloaded files
> ----------------------------------------------------------------
>
> Key: FLEX-33195
> URL: https://issues.apache.org/jira/browse/FLEX-33195
> Project: Apache Flex
> Issue Type: Improvement
> Components: InstallApacheFlex
> Reporter: Bertrand Delacretaz
> Priority: Minor
> Fix For: InstalApacheFlex 1.0
>
>
> In FLEX-33188, Om writes that the installer does check md5 digests of the
> files that it downloads.
> IMO this mechanism must be documented here, so that PPMC members can verify
> it - best is probably to add a link here to the code in question (under
> http://svn.apache.org/repos/asf/incubator/flex/ ) and explain if needed.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
