Where can i find the md5sum or checksum of mysql-community-server and client

English Applications
1

Hello
I’m downloading the installer rpms manually and I need to verify the integrity, where can I get the checksum information?
thanks

2

Hi, welcome

Q: Why would you do this? Both are in the repos.

3

Where are you downloading the RPM packages from? Sometimes the checksums are stored in a text file in the same directory (README, MANIFEST, __CKSUMS or the like).

4

I don’t know that exists to verify the package’s integrity.
The repo GPG key is usually considered sufficient to ensure the package comes from an authorized and authentic source (a configured openSUSE repository) at a specified URL, usually further verified by its HTTPS connection.

So,
If you’re checking for whether the package is valid and authentic,
I’d recommend you download a fresh copy from the OSS…
Then you’d know the package is authentic.
If the package is damaged in transit, I’d say it’s very unlikely the package would unpack and if somehow unpacked successfully to install without error, and the application run without error.
So, for instance regarding the apps you describe it’s important to do the install and setup yourself and do some testing before certifying all runs properly.
Even on the tiny chance a package would be damaged and somehow successfully unpacked and installed, the app can always be re-installed with the force option (-f).
If you’re transferring the file entirely by yourself, eg from one machine to another, you can create your own checksums (MD5 or SHA) if you wish but that’s in addition to what I described above.

Some suggestions,
TSU

5

All RPMS are signed with the following GPG key:

https://repo.mysql.com/RPM-GPG-KEY-mysql

You can import this key on a system with rpm installed and then verify package with this command:

$ rpm -K package.rpm

For example:

$ rpm --import https://repo.mysql.com/RPM-GPG-KEY-mysql

$ wget https://repo.mysql.com/yum/mysql-8.0-community/suse/15/x86_64/mysql-community-server-8.0.19-1.sl15.x86_64.rpm

$ rpm -Kv mysql-community-server-8.0.19-1.sl15.x86_64.rpm
mysql-community-server-8.0.19-1.sl15.x86_64.rpm:
Header V3 DSA/SHA1 Signature, key ID 5072e1f5: OK
Header SHA1 digest: OK
Header SHA256 digest: OK
Payload SHA256 digest: OK
MD5 digest: OK
V3 DSA/SHA1 Signature, key ID 5072e1f5: OK

6

Of course,
That assumes you downloaded your package from repo.mysql.com and not from an openSUSE repo.

TSU