From 1436c183ee92e1e6f71965b8219aa74a9571fc05 Mon Sep 17 00:00:00 2001
From: Dave Lasley <dave@laslabs.com>
Date: Fri, 16 Jun 2017 09:23:26 -0700
Subject: [PATCH] [IMP] Add checksum verification for wkhtmltox

---
 travis/travis_install_nightly | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/travis/travis_install_nightly b/travis/travis_install_nightly
index fc200fb45..4d94f7d4b 100755
--- a/travis/travis_install_nightly
+++ b/travis/travis_install_nightly
@@ -84,7 +84,17 @@ fi;
 
 if [ "${WKHTMLTOPDF_VERSION}" != "" ]; then
     echo "Install webkit (wkhtmltopdf) patched version ${WKHTMLTOPDF_VERSION}"
-    (cd ${HOME}/maintainer-quality-tools/travis/ && wget -qO- -t 1 --timeout=240 https://github.com/wkhtmltopdf/wkhtmltopdf/releases/download/${WKHTMLTOPDF_VERSION}/wkhtmltox-${WKHTMLTOPDF_VERSION}_linux-generic-amd64.tar.xz | tar -xJ --strip-components=2 wkhtmltox/bin/wkhtmltopdf)
+
+    cd ${HOME}/maintainer-quality-tools/travis/ &&
+    wkhtmltox=`wget -qO- -t 1 --timeout=240 https://github.com/wkhtmltopdf/wkhtmltopdf/releases/download/${WKHTMLTOPDF_VERSION}/wkhtmltox-${WKHTMLTOPDF_VERSION}_linux-generic-amd64.tar.xz` &&
+    sha256sum=`wget -qO- -t 1 --timeout=240 https://github.com/wkhtmltopdf/wkhtmltopdf/releases/download/${WKHTMLTOPDF_VERSION}/SHA256SUMS`
+
+    if [ `echo -n "${wkhtmltox}" | sha256sum` != $sha256sum ]; then
+        echo "SHA256 Checksum mismatch for wkhtmltopdf - skipping install"
+    else
+        echo -n "${wkhtmltox}" | tar -xJ --strip-components=2 wkhtmltox/bin/wkhtmltopdf
+    fi
+
 fi;
 
 # Expected directory structure: