chg: [installer] Installer now checks his own checksum (#4630)

chg: [installer] Installer now checks his own checksum

INSTALL/INSTALL.sh

@@ -268,6 +268,24 @@ checkFlavour () {
   fi
 }
 
+checkInstaller () {
+  # SHAsums to be computed, not the -- notatiation is for ease of use with rhash
+  SHA_SUMS="--sha1 --sha256 --sha384 --sha512"
+  for sum in $(echo ${SHA_SUMS} |sed 's/--sha//'); do
+    /usr/bin/wget -q -O /tmp/INSTALL.sh.sha${sum} https://raw.githubusercontent.com/MISP/MISP/2.4/INSTALL/INSTALL.sh.sha${sum}
+    INSTsum=$(shasum -a ${sum} ${0} | cut -f1 -d\ )
+    chsum=$(cat /tmp/INSTALL.sh.sha${sum} | cut -f1 -d\ )
+
+    if [[ "${chsum}" == "${INSTsum}" ]]; then
+      echo "sha${sum} matches"
+    else
+      echo "sha${sum}: ${chsum} does not match the installer sum of: ${INSTsum}"
+      echo "Delete installer, re-download and please run again."
+      exit 1
+    fi
+  done
+}
+
 # Extract manufacturer
 checkManufacturer () {
   if [ -z $(which dmidecode) ]; then
@@ -2211,6 +2229,9 @@ if [[ "$0" == "./INSTALL.tpl.sh" || "$(echo $0 |grep -o -e 'INSTALL.tpl.sh')" ==
   generateInstaller
 fi
 
+debug "Checking if we are uptodate and checksums match"
+checkInstaller
+
 space
 debug "Setting MISP variables"
 MISPvars

INSTALL/INSTALL.sh.sfv

@@ -1,5 +1,5 @@
-; Generated by RHash v1.3.8 on 2019-05-13 at 12:39.27
+; Generated by RHash v1.3.8 on 2019-05-15 at 11:41.54
 ; Written by Kravchenko Aleksey (Akademgorodok) - http://rhash.sf.net/
 ;
-;        92095  12:39.27 2019-05-13 INSTALL.sh
-INSTALL.sh 9D2AEB7536F7E08CCB2EED394568342ABBC8565B 17F8C85181E40081ACFA3A530C2B804855A984B65BCFF08C640283D9EADEB8B4 6F6E15CBD9E005C216422D197AC1A307EDCEB76B5D91C878E450BCC5177448E17CD34778E40ED5F0C5DD1B9FC528AD1E D00EB5FBF6E002C9ABC8C24AF962C77CD4801A0A5504273B1377F63FC24A838D408EE01FE3771C914A0368B54B3D43DA77F03134CADDF61D5E0DA24DF2909AFF
+;        92869  11:41.54 2019-05-15 INSTALL.sh
+INSTALL.sh 5BD994FACC7CEE48F69AB100B140CE0337A001C5 D3D8B2859C70FCA3834726BB09F961DC79DF86F0FA9A0589880F78019CFBA397 F20E746A5F8744F25D15C8BDD8091C83E51F53BB8B9B5D1EB3E77675F0ED20083E52D4620CCF9B8978C1C74D4C032B45 167D5AFB84F728191855C730E2F324AF7B41AFBA0403BE4208224AA3B06C036A40A2627E98CFCF5C7C0FFEAE827E77D41B72412098A74FA0669264C935A0D1D6

INSTALL/INSTALL.sh.sha1

@@ -1 +1 @@
-9d2aeb7536f7e08ccb2eed394568342abbc8565b  INSTALL.sh
+5bd994facc7cee48f69ab100b140ce0337a001c5  INSTALL.sh

INSTALL/INSTALL.sh.sha256

@@ -1 +1 @@
-17f8c85181e40081acfa3a530c2b804855a984b65bcff08c640283d9eadeb8b4  INSTALL.sh
+d3d8b2859c70fca3834726bb09f961dc79df86f0fa9a0589880f78019cfba397  INSTALL.sh

INSTALL/INSTALL.sh.sha384

@@ -1 +1 @@
-6f6e15cbd9e005c216422d197ac1a307edceb76b5d91c878e450bcc5177448e17cd34778e40ed5f0c5dd1b9fc528ad1e  INSTALL.sh
+f20e746a5f8744f25d15c8bdd8091c83e51f53bb8b9b5d1eb3e77675f0ed20083e52d4620ccf9b8978c1c74d4c032b45  INSTALL.sh

INSTALL/INSTALL.sh.sha512

@@ -1 +1 @@
-d00eb5fbf6e002c9abc8c24af962c77cd4801a0a5504273b1377f63fc24a838d408ee01fe3771c914a0368b54b3d43da77f03134caddf61d5e0da24df2909aff  INSTALL.sh
+167d5afb84f728191855c730e2f324af7b41afba0403be4208224aa3b06c036a40a2627e98cfcf5c7c0ffeae827e77d41b72412098a74fa0669264c935a0d1d6  INSTALL.sh

INSTALL/INSTALL.tpl.sh

@@ -616,6 +616,9 @@ if [[ "$0" == "./INSTALL.tpl.sh" || "$(echo $0 |grep -o -e 'INSTALL.tpl.sh')" ==
   generateInstaller
 fi
 
+debug "Checking if we are uptodate and checksums match"
+checkInstaller
+
 space
 debug "Setting MISP variables"
 MISPvars

docs/generic/supportFunctions.md

@@ -116,6 +116,24 @@ checkFlavour () {
   fi
 }
 
+checkInstaller () {
+  # SHAsums to be computed, not the -- notatiation is for ease of use with rhash
+  SHA_SUMS="--sha1 --sha256 --sha384 --sha512"
+  for sum in $(echo ${SHA_SUMS} |sed 's/--sha//'); do
+    /usr/bin/wget -q -O /tmp/INSTALL.sh.sha${sum} https://raw.githubusercontent.com/MISP/MISP/2.4/INSTALL/INSTALL.sh.sha${sum}
+    INSTsum=$(shasum -a ${sum} ${0} | cut -f1 -d\ )
+    chsum=$(cat /tmp/INSTALL.sh.sha${sum} | cut -f1 -d\ )
+
+    if [[ "${chsum}" == "${INSTsum}" ]]; then
+      echo "sha${sum} matches"
+    else
+      echo "sha${sum}: ${chsum} does not match the installer sum of: ${INSTsum}"
+      echo "Delete installer, re-download and please run again."
+      exit 1
+    fi
+  done
+}
+
 # Extract manufacturer
 checkManufacturer () {
   if [ -z $(which dmidecode) ]; then