Validate checksum of downloaded image

[ahnl]

YTL is adding sha256 checksums for the images.

They are implementing checksum validation to Naksu (digabi/naksu#57), see their PR for their implementation.

[developerfromjokela]

Hmm, doesn't etcher have hash validation?

[ahnl]

Yes, it may have.

…

On Mon 9. Aug 2021 at 13.47, Developer From Jokela ***@***.***> wrote: Hmm, doesn't etcher have hash validation? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#1 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ALDCUSUJJ6EFJHBODRJX72TT36W4BANCNFSM5BZVKVGQ> .

[developerfromjokela]

Seems like hash exists only for server image.

I feel no reason to validate any hashes (besides etcher's existing mechanism) if client image doesn't have them.

When they'll provide the hash, we can think about it. For now, notfix.

[developerfromjokela]

With new update, there seems to be a hash for student version of exam. Would consider implementing.

[Esinko]

Implementing this feature is a good idea. Though validation of images should happen once after the download.