If you're just talking about verifying the checksum of the ISOs, you can use a Metalink to download them. They're XML files with all the mirrors and checksums. Once the download is done, it will automatically verify the checksums. Usually much faster too.
To install: yum install aria2
To use:
aria2c URL or aria2c http://download.packages.ro/metalink/fedora/FC-6-i386-DVD_iso.metalink etc
The .metalinks for Fedora are at http://download.packages.ro/metalink/fedora/
On Fri, 2007-02-02 at 20:35 -0500, Anthony Bryan wrote:
If you're just talking about verifying the checksum of the ISOs, you can use a Metalink to download them. They're XML files with all the mirrors and checksums. Once the download is done, it will automatically verify the checksums. Usually much faster too.
But it is always a good idea to verify checksum independent of the download agent.
sha1sum is what Fedora (and I believe the Fedora respins) use. There will be a file you can download from Fedora or the respin community that has the sha1dum in it. Put it is the same directory as the downloaded iso. Then use sha1sum with the checksum file as the arguement, and it will verify that what you have is genuine.
man sha1sum
(man page should also be available in yelp graphical viewer)
Michael A. Peters wrote:
But it is always a good idea to verify checksum independent of the download agent.
sha1sum is what Fedora (and I believe the Fedora respins) use. There will be a file you can download from Fedora or the respin community that has the sha1dum in it. Put it is the same directory as the downloaded iso. Then use sha1sum with the checksum file as the arguement, and it will verify that what you have is genuine.
Also worth noting is that the SHA1SUM file is signed using GPG (at least for the official Fedora .isos). While checking the sha1sum will assure you that the .iso downloaded completely, only by checking the GPG signature can you be assured that the .iso is the official one created by the Fedora project.