Validating Downloaded Updates with Update.exe (Squirrel Updater)

[maoryadin]

I am using update.exe from Squirrel to download updates for my application. However, I’ve noticed that update.exe accepts any server URL, and my application will proceed with launching the downloaded update without any validation.

Problem:

How can I implement validation for the downloaded updates to ensure their integrity and security before launching them?

Expected Behavior:

The downloaded update should be validated (e.g., by checksum or signature verification) to prevent untrusted or corrupted files from being executed.

Any guidance on how to set up this validation mechanism would be appreciated.