corrupted ISOs, or wrong SHA1SUMs ??

SCHAER Frederic frederic.schaer at cea.fr
Fri Aug 22 16:28:00 UTC 2008


Hi,

Willing to tryout few virtualisations solutions in fedora, I downloaded the DVD ISO yesterday.

Just to be on the safe side, I checked the SHA1 sums : surprinsigly, there was an error, and verification failed. So, I went to another mirror, and downloaded a new DVD image. I checked it : verification failed.

Now, I just saw the warnings from fedora stating some servers had suffered unauthorised logins, and I'm wondering if these ISOs are hacked, corrupted or if it's just the SHA1 sums that are wrong on the fedora mirrors ?

Anyone could re-assure me ?

This is what I have (on cygwin, but this shouldn't be a problem, should it ?) :

$ sha1sum.exe Fedora-9-x86_64-DVD.iso
62a608efe79fe50fa60ce8ea9e78f46ebbcec60c *Fedora-9-x86_64-DVD.iso

$ md5sum Fedora-9-x86_64-DVD.iso*
378773de76587c2f1829b2dd86452a1a *Fedora-9-x86_64-DVD.iso
378773de76587c2f1829b2dd86452a1a *Fedora-9-x86_64-DVD.iso_old

$ grep DVD SHA1SUM
f92576227484a4eeda0e86a497836c67c34d20ef  Fedora-9-x86_64-DVD.iso

Thanks,

Frederic Schaer
Tel. : +33 1 69 08 99 25
Fax : +33 1 69 08 31 47
CEA, IRFU, SEDI, Centre de Saclay, F-91191 Gif Sur Yvette, France





More information about the users mailing list