Add md5 sha sum to latest.zip download

[mechanix]

Hi,

there was already a ticket open for this request: https://core.trac.wordpress.org/ticket/19928

but unfortunately this doesn´t work anymore:

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 13 Jun 2017 13:23:23 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: ​https://wordpress.org/latest.zip

Any chance to have the md5 sum back in the header? Thank you

[JPry]

Replying to mechanix:

Hi @mechanix! Thanks for taking the time to open an issue here on Trac!

The header is indeed there. I don't know exactly when, but the wordpress.org domain has switched over to HTTPS since that original ticket was filed. The Content-MD5 is indeed there in the HTTPS version. Note what happens when you allow curl to follow the redirect below:

curl -IL 'http://wordpress.org/latest.zip'
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 13 Jun 2017 13:35:59 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://wordpress.org/latest.zip

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Jun 2017 13:35:59 GMT
Content-Type: application/zip
Content-Length: 8901913
Connection: keep-alive
Cache-control: private
Content-Disposition: attachment; filename=wordpress-4.8.zip
Last-Modified: Thu, 08 Jun 2017 14:30:14 GMT
X-Frame-Options: SAMEORIGIN
Content-MD5: 198f6de51d56c14bdc27c3a4cd3c7169
X-nc: HIT lax 250
Accept-Ranges: bytes

You can use the HTTPS version directly to skip the redirect.