DC++

Self-update

Bug #541565 reported by Szabolcs Molnár
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
DC++
Confirmed
Wishlist
Unassigned

Bug Description

I think a new option should be added to the "New updates are available" dialog so instead of the "Visit Download page?" question there should be three buttons: "Install update", "Visit homepage", "Close" (or "Cancel"). The new "Install update" could download the installer of the latest version (url defined in version.xml), close the application then launch the installer.
I think this is not a hard-to-do feature, and would ease the client upgrade process for the users.

Revision history for this message
eMTee (realprogger) wrote :

Can you recommend any easy way of checking the integrity of the downloaded executable? Because it must be done if you don't want to create a potential security risk by executing a downloaded binary... (I think this is the main reason why isn't this function in DC++)

Afak some other DC clients have this function, maybe a check wouldn't hurt about what they did (or did not) do to avoid security issues.

Revision history for this message
Szabolcs Molnár (fleet) wrote :

Well, since we would always define the download url by hand, some sort of checksum could be added too. Either the TTH hash of the current installer or something similar.
If the hashes don't match, the client would announce a warning that something went wrong during the download so try again later or visit the download page.

Revision history for this message
eMTee (realprogger) wrote :

Getting any download URL and TTH (or something similar) hash data from a file sent in clear text and downloaded from a non-dedicated server identified by a DNS name? I am still not sold...

Revision history for this message
Twilight2013 (twilight2013) wrote :

The auto-update similar to Mozilla FireFox & uTorrent would be a nice additional feature to DC++ as an idea, recommendation or suggestion.

Revision history for this message
eMTee (realprogger) wrote :

What about using PGP for integrity checking? eg. http://www.gnupg.org. That'd make update things not just better but even safer than it is at the moment.

Changed in dcplusplus:
status: New → Confirmed
importance: Undecided → Low
Fredrik Ullner (ullner)
Changed in dcplusplus:
importance: Low → Wishlist
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.