Merge pull request #9 from kivattt/main

Add SHA256 checksum to verify ReIndev .jar downloads

Author: Fox2Code

build.gradle

@@ -1,3 +1,6 @@
+import java.nio.file.Files
+import java.security.MessageDigest
+
 plugins {
     id 'java-base'
 }
@@ -105,14 +108,66 @@ File clientFile = new File(project.rootDir, "client" + File.separator +
         "libs" + File.separator + project['reindev.clientJar'])
 
 if (!clientFile.exists()) {
-    println("Downloading client...")
-    download(new URL(project['reindev.clientUrl'] as String), clientFile)
+    println("Downloading client from " + project['reindev.clientUrl'])
+
+    for (int i = 0; i < 2; i++) { // Max 1 retry for downloading
+        if (i > 0) {
+            println("Retrying download in 1 second...")
+            Thread.sleep(1000);
+        }
+
+        download(new URL(project['reindev.clientUrl'] as String), clientFile)
+
+        byte[] data = Files.readAllBytes(clientFile.toPath())
+        byte[] hash = MessageDigest.getInstance("SHA-256").digest(data)
+        String hashString = new BigInteger(1, hash).toString(16)
+
+        println("SHA256 hash: " + hashString)
+        if (hashString == project['reindev.clientSHA256Sum'] as String) {
+            println("Hash matched expected")
+            break
+        } else {
+            println("Hash did not match! Expected: " + project['reindev.clientSHA256Sum'])
+            if (clientFile.delete()) {
+                println("Client jar file deleted")
+            } else {
+                println("Failed to delete client jar file")
+                break;
+            }
+        }
+    }
 }
 
 File serverFile = new File(project.rootDir, "server" + File.separator +
         "libs" + File.separator + project['reindev.serverJar'])
 
 if (!serverFile.exists()) {
-    println("Downloading server...")
-    download(new URL(project['reindev.serverUrl'] as String), serverFile)
+    println("\nDownloading server from " + project['reindev.serverUrl'])
+
+    for (int i = 0; i < 2; i++) { // Max 1 retry for downloading
+        if (i > 0) {
+            println("Retrying download in 1 second...")
+            Thread.sleep(1000);
+        }
+
+        download(new URL(project['reindev.serverUrl'] as String), serverFile)
+
+        byte[] data = Files.readAllBytes(serverFile.toPath())
+        byte[] hash = MessageDigest.getInstance("SHA-256").digest(data)
+        String hashString = new BigInteger(1, hash).toString(16)
+
+        println("SHA256 hash: " + hashString)
+        if (hashString == project['reindev.serverSHA256Sum'] as String) {
+            println("Hash matched expected")
+            break
+        } else {
+            println("Hash did not match! Expected: " + project['reindev.serverSHA256Sum'])
+            if (serverFile.delete()) {
+                println("Server file deleted")
+            } else {
+                println("Failed to delete server file")
+                break;
+            }
+        }
+    }
 }

gradle.properties

@@ -11,6 +11,8 @@ reindev.clientUrl=https://cdn.fox2code.com/files/reindev_2.8.1_04.jar
 reindev.serverUrl=https://cdn.fox2code.com/files/reindev281-04_server.jar
 reindev.clientJar=reindev_2.8.1_04.jar
 reindev.serverJar=reindev281-04_server.jar
+reindev.clientSHA256Sum=54c8044dca694544b7a42f9ee6e80c13a8b3d1a492c8d3db150b239ab35acc80
+reindev.serverSHA256Sum=a51ccf171c1a45ff1c158645c31c5e97e3b7a331f99eb13ad687713ddc85ef55
 reindev.version=2.8.1_4
 reindev.version.allowFrom=2.8.1_3