l i n u x - u s e r s - g r o u p - o f - d a v i s
Next Meeting:
July 7: Social gathering
Next Installfest:
Latest News:
Jun. 14: June LUGOD meeting cancelled
Page last updated:
2007 Apr 30 08:57

The following is an archive of a post made to our 'vox-tech mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox-tech] [revised] md5sum (w/o html)
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox-tech] [revised] md5sum (w/o html)

> Hi:
> I've d/l iso files for linux cds.
> Found suggestion on kubuntu web page to check these w/ md5sum.
> Hard time understanding outcome once iso runs thru program.
> Example:
> knoppix 5.2 iso run thru gives a md5sum value of 
> 51955807506120c90d43deebb5bc5a8e .
> When hitting the "compare" button a window comes up with "Md5 Check Sums 
> are different".
> Sabayon iso gives similar results.
> So...what does this mean?  I have a value but thats all I have.  No blatent 
> signs telling me that the authenticity is legit nor file integrity.

The calculated sums should match with the values given in the separately
distributed file of sums (usually called MD5SUMS or SHA1SUMS). As an
extra step, you might want to use GnuPG to verify the digtal signature
in the MD5SUMS.gpg file (which will hopefully tell you whether the
MD5SUMS file is legit; you need to have a copy of the key used to
produce the signature).

For example, http://us.releases.ubuntu.com/feisty/ stocks theses files:

MD5SUMS                                 19-Apr-2007 01:53  446
MD5SUMS.gpg                             19-Apr-2007 01:53  191
ubuntu-7.04-alternate-amd64.iso         15-Apr-2007 08:43  698M  

When I start k3b in the firectory containing the iso files and the
MD5SUMS file, it automatically checks the ISOs agains MD5SUMS. If there
is a mismatch your ISO may have been corrupted in transport. In this
case I recomment using rsync to synchronize your file against the file
on the mirror. Rsync transfers only the changed parts of the file plus
some necessary communication overhead, potentially saving you from
downloading a whole 700 Mb again because 1 Mb was corrupted.

Henry House
+1 530 753 3361 ext. 13
Please don't send me HTML mail! My mail system frequently rejects it.
The unintelligible text that may follow is a digital signature.
See <http://hajhouse.org/pgp> to find out how to use it.
My OpenPGP key: <http://hajhouse.org/hajhouse.asc>.

Attachment: signature.asc
Description: Digital signature

vox-tech mailing list

LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
Sunset Systems
Who graciously hosts our website & mailing lists!