On 07/27/2012 08:58 AM, Fredrik Orderud wrote:
a simpler check against the in-built JAR/ZIP-file CRC-32 checksum would probably be good enough in most situations
Even simpler: check if the file starts with 0x50 0x4b 0x03 0x04, the ZIP magic. If not, it is some junk like an error page which should be treated like a 404 or other connection error.
File a bug or open a pull request; hudson.model.UpdateCenter.UpdateCenterConfiguration.postValidate could easily do this, I think.