1 files changed, 18 insertions, 1 deletions
diff --git a/src/client.rs b/src/client.rs
index 616ceef..6b1bb80 100644
--- a/src/client.rs
+++ b/src/client.rs
@@ -4,6 +4,7 @@ use crate::chunk::GenerationChunk;
 use crate::chunker::Chunker;
 use crate::chunkid::ChunkId;
 use crate::chunkmeta::ChunkMeta;
+use crate::error::ObnamError;
 use crate::fsentry::{FilesystemEntry, FilesystemKind};
 use crate::generation::{FinishedGeneration, LocalGeneration};
 use crate::genlist::GenerationList;
@@ -212,8 +213,24 @@ impl BackupClient {
             return Err(ClientError::ChunkNotFound(chunk_id.to_string()).into());
         }
 
+        let headers = res.headers();
+        let meta = headers.get("chunk-meta");
+        if meta.is_none() {
+            return Err(ObnamError::NoChunkMeta(chunk_id.to_string()).into());
+        }
+        let meta = meta.unwrap().to_str()?;
+        let meta: ChunkMeta = serde_json::from_str(meta)?;
+
         let body = res.bytes()?;
-        Ok(DataChunk::new(body.to_vec()))
+        let body = body.to_vec();
+        let actual = sha256(&body);
+        if actual != meta.sha256() {
+            return Err(ObnamError::WrongChecksum(chunk_id.to_string()).into());
+        }
+
+        let chunk: DataChunk = DataChunk::new(body);
+
+        Ok(chunk)
     }
 
     fn fetch_generation_chunk(&self, gen_id: &str) -> anyhow::Result<GenerationChunk> {