mirror/lnd
1
0 Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

scripts: verify version in manifest

Browse Source 
To make a downgrade attack harder, we also check that the version string
is contained in the manifest, on the same line as the hash.
This commit is contained in:
Oliver Gugger committed 2021-09-27 15:49:12 +02:00
1 parent 5bafff2cf2
commit d7d1574095
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
scripts/verify-install.sh
+1 -1
View File
@@ -231,7 +231,7 @@ function check_hash() {
fi fi
fi fi
if ! grep -q "^$SUM" "$TEMP_DIR/$MANIFEST"; then if ! grep "^$SUM" "$TEMP_DIR/$MANIFEST" | grep -q "$VERSION"; then
echo "ERROR: Hash $SUM for $2 not found in $MANIFEST: " echo "ERROR: Hash $SUM for $2 not found in $MANIFEST: "
cat "$TEMP_DIR/$MANIFEST" cat "$TEMP_DIR/$MANIFEST"
echo " The expected release binaries have been verified with the developer " echo " The expected release binaries have been verified with the developer "