ISO md5/sha1 checksums don't match download

Help
#1

Hi,

I have just downloaded the ISO for Chakra and noticed that the checksum does not match.

The Website (https://www.chakralinux.org) mentions MD5 3f12d2e658835b31939c75e21fb71004 and SHA1 9d86f81f87e192d56ccf48d2e6d982b6d3f92f3b.
But the downloaded ISO from the Germany mirror (https://rsync.chakralinux.org/releases/chakra-2017.10-goedel-x86_64.iso) has different checksums (MD5: ed93cc09a0673d815a11e9509d85d78d, SHA1: efcb88820a29e810a50f531019ce74055640747c).

Could you please check if this is just a documentation issue or an actual security problem?

I’m looking forward to trying out Arch/Chakra.

Best regards,
Markus

1 Like
#2

I last downloaded the iso over a year ago and the checksum was ok. I’d suspect a bad download first.

#3

This is related. No idea if James has filed a bugreport yet, it seems he’s not even on the forum anymore. You might want to check that and if there’s none, file one.
Meanwhile, this might be helpful.

1 Like
#4

@ReemZ I tried the mirror you suggested but it led me to a 404 error.
Was considering trying out Chakra sometime soon but it’s kind of hard to do that when I can’t be easily sure the front-page ISOs aren’t corrupt… :confused:
(I did try it myself and did verify that the checksums are different)

Also should mention there’s no active torrent magnet for the big download button over there…