Verify checksums of packages downloaded by scripts

scripts/install_obsolete_jsoncpp_1_7_4.sh

@@ -6,7 +6,13 @@ TEMPDIR=$(mktemp -d)
     cd "$TEMPDIR"
     jsoncpp_version="1.7.4"
     jsoncpp_package="jsoncpp-${jsoncpp_version}.tar.gz"
+    jsoncpp_sha256=10dcd0677e80727e572a1e462193e51a5fde3e023b99e144b2ee1a469835f769
     wget -O "$jsoncpp_package" https://github.com/open-source-parsers/jsoncpp/archive/${jsoncpp_version}.tar.gz
+    if ! [ "$(sha256sum "$jsoncpp_package")" = "${jsoncpp_sha256}  ${jsoncpp_package}" ]
+    then
+        >&2 echo "ERROR: Downloaded jsoncpp source package has wrong checksum."
+        exit 1
+    fi
     tar xvzf "$jsoncpp_package"
     cd "jsoncpp-${jsoncpp_version}"
     mkdir -p build