josuakrause / curl-chk Goto Github PK

Multiple files would be acceptable if the URL contains the md5 sum or multiple --md5 are specified, -O is specified or multiple -o, and the output of the tests are more standardized:

4D19AEFF01C filenameA.txt [Ok]
4D19AEFF01C filenameB.txt [Fail]

All arguments without a '-' prefix are URLs.

Pipe the output to a temporary file and check it if no filename is specified. Would only work with a single file though.
Enables things like

curl -sL https://asciinema.org/install | sh

(which are apparently quite common) to be made more (you still have to trust the other end / md5) secure:

curl -sL https://asciinema.org/install#md5=e17f840d197c47df3e6d5b3bc4ca4ff4 | sh

Right now only md5 is supported. sha1 would be a start..

The granularity and complexity of -O, --remote-name, and --remote-name-all is not yet correctly reflected by curl-chk. Normally -O, --remote-name acts on one file at a time and --remote-name-all acts on all files. But eg. --remote-name-all can be deactivated using -o - or --no-remote-name. Further investigation is needed. I doubt people are actually using the complexity to its fullest...