validate_gem_checksums.sh

#!/usr/bin/env bash

if ! which openssl > /dev/null; then
  echo Install openssl
  exit 1
fi

if ! which curl > /dev/null; then
  echo Install curl
  exit 1
fi

gem_cache=$1
invalid=0

echo This will take a while...

for gem in $gem_cache/*.gem; do
  gemfile=$(basename $gem)

  local=$(openssl md5 $gem | awk '{print $2}')
  remote=$(curl -s -D - -X HEAD -H 'Connection:close' http://production.cf.rubygems.org/gems/$gemfile | grep 'ETag' | cut -d '"' -f 2)

  if [[ ! $local = $remote ]]; then
    echo $gemfile mismatch. local: $local, remote: $remote
    invalid=1
  fi
done

if [[ $invalid = 0 ]]; then
  echo All gems are valid.;
else
  echo Some gems are invalid.;
fi

exit $invalid