Leap 15.6 ISO sha256 checksum correct?

English Install/Boot/Login
1

Hi everybody,
I downloaded the Leap 15.6 ISO file yesterday and tried to verify the sha256 checksum, which turned out to be different to the version in the iso.sha256 file.
There are a couple of posts in the forum regarding the checksums, though. However, none seems to address the verification of the downloaded iso.
I know that Leap 15.6 is somewhat “old” but I try to upgrade from my Leap 15.5 to 16.0 and hence have to do that step in between.

So here’s my observation:
After downloading the file

openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso

from

[https://download.opensuse.org/distribution/leap/15.6/iso/](https://download.opensuse.org/distribution/leap/15.6/iso/)

I tried to verify the sha256 from the file openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso.sha56".
The hash I got with Windows11 certutil and the tool WinHash are both identical:
af2116319cff373f27c16a41989f2adcf14042dc9d24c5149837451e0e925345

However, this is different to the sha256 checksum in the iso.sha256 file:
a74d4072e639c75ca127df3d869c1e57bcc44a093a969550f348a3ead561fe4f
This checksum is the one that @nrickert confirmed in:
https://forums.opensuse.org/t/what-is-the-right-checksum-for-the-leap-15-6-iso-image/183019/2

But does it seem to be different now?
Has anyone checked this lately?
Am I missing something here?
Yes, I know I am using Windows for the verification… but that must not make a difference in the outcome. :slight_smile:

Thanks for helping me out with this.

2

I downloaded the same ISO about three weeks ago. I show it and the sha256 file in the listing below, and which I do a “cat” to show the sha value … plus I executed the “sha256sum” command on the ISO to show it results in the correct checksum:

(of course, I’m not using Windows :slight_smile: )

myuser@machine:~/vms>
myuser@machine:~/vms> ll
 4631560192 Apr  5 18:58 openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso
        117 Apr  5 19:17 openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso.sha256
myuser@machine:~/vms>

myuser@machine:~/vms> cat openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso.sha256 
a74d4072e639c75ca127df3d869c1e57bcc44a093a969550f348a3ead561fe4f  openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso
myuser@machine:~/vms>

myuser@machine:~/vms> sha256sum openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso
a74d4072e639c75ca127df3d869c1e57bcc44a093a969550f348a3ead561fe4f  openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso
myuser@machine:~/vms>
3

@Stormrider88 Hi and welcome to the Forum :smile:

Then perhaps something is not right in the Windows world, or a corrupt download…

cat openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso.sha256
a74d4072e639c75ca127df3d869c1e57bcc44a093a969550f348a3ead561fe4f  openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso

sha256sum -c openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso.sha256 
openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso: OK
4

Thanks guys for the confirmation.
I absolutely understand the jokes about the use of a Windows system… :slight_smile:
I’m downloading and verifying it again (have done that already twice with the same results). Maybe downloading it in Leap 15.5 and using sha256sum there will bring a different result. However, takes me approx. 2-3 hours with my slow connection to get the iso… that’s why I use my Windows laptop → faster download in the company.

5

You might want to double-check tha you’re running those commands with proper arguments:

To check for sha256ssum , use the built-in PowerShell commands Get-FileHash or (as you stated) certutil.

Open PowerShell, type:
Get-FileHash “\path\to\the *.iso” -Algorithm SHA256
… or use:
certutil -hashfile [file_path] SHA256 in a command prompt.

6

But why oh why? You say you have a Leap 15.5. I really do not understand you. And of course here on the openSUSE forums many will not have any idea about what MS Windows does do.

7

Thanks for the answer, myswtest. I use certutil exactly like you mentioned for almost every file I download so I was quite sure that it works correctly.
The new download of the ISO file has finished and this time I could verify the checksum correctly:

PS C:\Users\xy certutil -hashfile .\Downloads\openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso sha256
SHA256-Hash .\Downloads\openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso:
a74d4072e639c75ca127df3d869c1e57bcc44a093a969550f348a3ead561fe4f

Well guys, you saved at least my world from collapsing!
It seems that last time both download were corrupted although it showed the 4.3GB. But then it must have been corrupted twice.
So malcolmlewis was right… corrupt download.

Thanks for the friendly chat and the help with this obviously not very technical issue. So my journey to Leap 16 can go on now… let’s see.

8

Yes, true. But you don’t have to understand me. There are reasons for it.

9

@Stormrider88 I’d suggest using the curl.exe command to download… eg;

curl.exe --fail --progress-bar --location --remote-name https://download.opensuse.org/distribution/leap/15.6/iso/openSUSE-Leap-15.6-DVD-x86_64-Build710.3-Media.iso.sha256

1 Like
10

Thank you @malcolmlewis for your help. I highly appreciate all the effort.
I will change to curl for downloading these things.

12

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.