@NilsOF I’ve now implemented this, but can’t fully test it end to end as I don’t have a device with firmware that is in this database. I’ve tested that I can download the firmware from where-ever it is hosted, and have tested that when the device asks for a firmware that we can do a lookup, and tested the download and hash checks, so I think this is mostly ok, but I can’t string it together through the OH console (since I think the UI doesn’t currently support firmware updates @ysc can you confirm this?).
Is this something you could test if you a devices that’s in this database? As we discussed above, it’s impossible to know what devices are provided since there’s no information that links the firmware to a device 
https://github.com/openhab/org.openhab.binding.zigbee/pull/767