Remove signature verification from make_download. Signatures are verified by the website, before deployment.
This commit is contained in:
@@ -29,37 +29,6 @@ string = string.replace("##VERSION_MAC##", version_mac)
|
||||
string = string.replace("##VERSION_ANDROID##", version_android)
|
||||
string = string.replace("##VERSION_APK##", APK_VERSION)
|
||||
|
||||
files = {
|
||||
'tgz': "Electrum-%s.tar.gz" % version,
|
||||
'appimage': "electrum-%s-x86_64.AppImage" % version,
|
||||
'zip': "Electrum-%s.zip" % version,
|
||||
'mac': "electrum-%s.dmg" % version_mac,
|
||||
'win': "electrum-%s.exe" % version_win,
|
||||
'win_setup': "electrum-%s-setup.exe" % version_win,
|
||||
'win_portable': "electrum-%s-portable.exe" % version_win,
|
||||
}
|
||||
|
||||
for k, n in files.items():
|
||||
path = "dist/%s"%n
|
||||
link = "https://download.electrum.org/%s/%s"%(version,n)
|
||||
if not os.path.exists(path):
|
||||
os.system("wget -q %s -O %s" % (link, path))
|
||||
if not os.path.getsize(path):
|
||||
os.unlink(path)
|
||||
string = re.sub("<div id=\"%s\">(.*?)</div>"%k, '', string, flags=re.DOTALL + re.MULTILINE)
|
||||
continue
|
||||
sigpath = path + '.ThomasV.asc'
|
||||
siglink = link + '.ThomasV.asc'
|
||||
if not os.path.exists(sigpath):
|
||||
os.system("wget -q %s -O %s" % (siglink, sigpath))
|
||||
if not os.path.getsize(sigpath):
|
||||
os.unlink(sigpath)
|
||||
string = re.sub("<div id=\"%s\">(.*?)</div>"%k, '', string, flags=re.DOTALL + re.MULTILINE)
|
||||
continue
|
||||
if os.system("gpg --verify %s"%sigpath) != 0:
|
||||
raise Exception(sigpath)
|
||||
string = string.replace("##link_%s##"%k, link)
|
||||
|
||||
|
||||
with open(download_page,'w') as f:
|
||||
f.write(string)
|
||||
|
||||
Reference in New Issue
Block a user