Jira (PUP-7950) Allow specifying an MD5 URI for files with HTTP(s) sources

1 view
Skip to first unread message

Lee Lowder (JIRA)

unread,
Sep 14, 2017, 12:04:03 PM9/14/17
to puppe...@googlegroups.com
Lee Lowder created an issue
 
Puppet / New Feature PUP-7950
Allow specifying an MD5 URI for files with HTTP(s) sources
Issue Type: New Feature New Feature
Assignee: Unassigned
Created: 2017/09/14 9:03 AM
Priority: Normal Normal
Reporter: Lee Lowder

Because a simple "touch" command can change the ctime/mtime on files, and thus leading to false changes (which could then trigger service or exec refreshes). there should be a way to specify a URI that contains an MD5sum or other checksum value for files that use http or https based sources.

Example:

file {
  '/some/path/to/some_file.ext':
     source => 'http:://example.com/files/some_file.ext',
     checksum_source => 'http://example.com/files/some_file.ext.md5',
}

Add Comment Add Comment
 
This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe)
Atlassian logo

Adrien Thebo (JIRA)

unread,
Sep 18, 2017, 5:16:04 PM9/18/17
to puppe...@googlegroups.com
Adrien Thebo commented on New Feature PUP-7950
 
Re: Allow specifying an MD5 URI for files with HTTP(s) sources

Thank you for filing this issue. We agree it is likely an improvement, but due to other issues demanding precedence, we don’t anticipate being able to address this any time soon. If you are interested in submitting a patch to the repository for this project at https://github.com/puppetlabs, please open a pull request for this feature.

Josh Cooper (JIRA)

unread,
Mar 29, 2019, 1:10:04 PM3/29/19
to puppe...@googlegroups.com
Josh Cooper updated an issue
 
Change By: Josh Cooper
Team: Coremunity
This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)
Atlassian logo

Josh Cooper (Jira)

unread,
May 19, 2020, 3:00:09 PM5/19/20
to puppe...@googlegroups.com
Josh Cooper commented on New Feature PUP-7950
 
Re: Allow specifying an MD5 URI for files with HTTP(s) sources

You can specify the checksum (type) and checksum_value, but there are issues being tracked in PUP-10368. It's unlikely we'll support a checksum_source that is on an HTTP server, as the checksum could be spoofed to match whatever the content is changed to. So I'm going to close this as won't do.

This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935)
Atlassian logo
Reply all
Reply to author
Forward
0 new messages