Pragmatically disabled verification of downloads from custom sources.

src/main/java/com/sk89q/mclauncher/LaunchTask.java

@@ -44,6 +44,7 @@
 import com.sk89q.mclauncher.addons.Addon;
 import com.sk89q.mclauncher.addons.AddonsProfile;
 import com.sk89q.mclauncher.config.Configuration;
+import com.sk89q.mclauncher.config.Constants;
 import com.sk89q.mclauncher.config.Def;
 import com.sk89q.mclauncher.config.LauncherOptions;
 import com.sk89q.mclauncher.launch.GameLauncher;
@@ -631,6 +632,9 @@ private void update(File rootDir, UpdateCache cache, InputStream packageStream,
 
         updater = new Updater(packageStream, rootDir, cache);
         updater.setReinstall(forced);
+        // Verify if it's the default download or if the relevant constant is enabled
+        updater.setVerifying(configuration.getUpdateUrl() == null 
+                || Constants.VERIFY_CUSTOM_DOWNLOADS);
         updater.registerParameter("user", username);
         updater.registerParameter("ticket", "deprecated"); // Now deprecated
         for (ProgressListener listener : getProgressListenerList()) {

src/main/java/com/sk89q/mclauncher/config/Constants.java

@@ -37,6 +37,7 @@
  */
 public class Constants {
 
+    public static final boolean VERIFY_CUSTOM_DOWNLOADS = false;
     public static final URL NEWS_URL;
 
     private static final String NEWS_URL_BASE = "http://minecraft.update.sk89q.com/updates/?v=%version%";

src/main/java/com/sk89q/mclauncher/update/Updater.java

@@ -65,6 +65,7 @@ public class Updater implements DownloadListener {
 
     private static final Logger logger = Logger.getLogger(Updater.class.getCanonicalName());
 
+    private boolean verifying = true;
     private InputStream packageStream;
     private File rootDir;
     private UpdateCache cache;
@@ -96,6 +97,24 @@ public Updater(InputStream packageStream, File rootDir, UpdateCache cache) {
         this.cache = cache;
     }
 
+    /**
+     * Returns whether signatures are verified after the download.
+     * 
+     * @return true if verifying
+     */
+    public boolean isVerifying() {
+        return verifying;
+    }
+
+    /**
+     * Set whether the signatures of downloaded files should be verified.
+     * 
+     * @param verifying true to verify
+     */
+    public void setVerifying(boolean verifying) {
+        this.verifying = verifying;
+    }
+
     /**
      * Get the number of download tries.
      * 
@@ -332,6 +351,10 @@ private void downloadFiles() throws UpdateException {
      * @throws UpdateException 
      */
     private void verify() throws UpdateException {
+        if (!isVerifying()) { // No verification!
+            return;
+        }
+
         currentIndex = 0;
 
         SignatureVerifier signatureVerifier = new SignatureVerifier(