Skip to main content
Jump to: navigation, search

Difference between revisions of "Platform-releng/How to check integrity of downloads"

(Initial contents)
 
m (improved wording to be more general)
Line 4: Line 4:
 
in the [http://www.gnu.org/software/textutils/textutils.html GNU Textutils] package. Windows binary versions are available such as at [http://www.etree.org/md5com.html etree.org].  
 
in the [http://www.gnu.org/software/textutils/textutils.html GNU Textutils] package. Windows binary versions are available such as at [http://www.etree.org/md5com.html etree.org].  
  
* Most downloads have an associated link "(md5)" to a *.md5file containing its MD5 checksum and another link "(sha1)" to a *.sha1 file containing its SHA1 checksum. Download these files, such as from [http://download.eclipse.org/eclipse/downloads/ Eclipse download page], into the same directory as the downloaded archive file.
+
* Most downloads have an associated link "(md5)" to a *.md5file containing its MD5 checksum and another link "(sha1)" to a *.sha1 file containing its SHA1 checksum. Download these files, such as from [http://download.eclipse.org/eclipse/downloads/ Eclipse download page], or the main Eclipse Foundation's [http://www.eclipse.org/downloads/ packages downloads page] (the checksums are available on the page where you select a mirror, but the checksums come directly from "eclipse.org", not the mirror). Put those checksum files into the same directory as the downloaded archive (zip or tar.gz) file.
  
* Execute the command "md5sum -c <zipfilename>.md5" or "sha1sum -c <zipfilename>.sha1". The result "<zipfilename>: OK" is indicative of an intact download.
+
* Using the tools described at beginning of this page, execute a command such as "md5sum -c <zipfilename>.md5" or "sha1sum -c <zipfilename>.sha1". The result "<zipfilename>: OK" means the downloaded file is complete and intact.

Revision as of 23:52, 2 December 2013

Verifying integrity of downloads

Downloads can be verified using md5sum or sha1sum, a Unix command line tool provided in the GNU Textutils package. Windows binary versions are available such as at etree.org.

  • Most downloads have an associated link "(md5)" to a *.md5file containing its MD5 checksum and another link "(sha1)" to a *.sha1 file containing its SHA1 checksum. Download these files, such as from Eclipse download page, or the main Eclipse Foundation's packages downloads page (the checksums are available on the page where you select a mirror, but the checksums come directly from "eclipse.org", not the mirror). Put those checksum files into the same directory as the downloaded archive (zip or tar.gz) file.
  • Using the tools described at beginning of this page, execute a command such as "md5sum -c <zipfilename>.md5" or "sha1sum -c <zipfilename>.sha1". The result "<zipfilename>: OK" means the downloaded file is complete and intact.

Back to the top