X-Git-Url: http://www.git.cypherpunks.ru/?a=blobdiff_plain;f=gocheese.go;h=655908d47f789735bc84033a9ef6b006991d0185;hb=b2c61aa43c08395b0d38fd6def46f369e0366e9b;hp=5ecd959bc61e6f1a5881f8dc0d6b8c6b97b43de6;hpb=5d0340e435f90599a8072ad8cd67ef8ef4be116a;p=gocheese.git

diff --git a/gocheese.go b/gocheese.go
index 5ecd959..655908d 100644
--- a/gocheese.go
+++ b/gocheese.go
@@ -151,6 +151,11 @@ func refreshDir(
 			http.Error(w, err.Error(), http.StatusInternalServerError)
 			return false
 		}
+		if !strings.HasPrefix(pkgURL.Fragment, SHA256Prefix) {
+			log.Println(r.RemoteAddr, "pypi", filename, "no SHA256 digest provided")
+			http.Error(w, "no SHA256 digest provided", http.StatusBadGateway)
+			return false
+		}
 		digest, err = hex.DecodeString(strings.TrimPrefix(pkgURL.Fragment, SHA256Prefix))
 		if err != nil {
 			http.Error(w, err.Error(), http.StatusBadGateway)
@@ -553,10 +558,10 @@ func goodIntegrity() bool {
 				log.Fatal(err)
 			}
 			if bytes.Compare(hasher.Sum(digest[:0]), data) == 0 {
-				log.Println(pkgName, "GOOD")
+				fmt.Println(pkgName, "GOOD")
 			} else {
 				isGood = false
-				log.Println(pkgName, "BAD")
+				fmt.Println(pkgName, "BAD")
 			}
 			hasher.Reset()
 		}