Wrong name of ISO checksums for leap 15.4

When I download the updated or canonical ISO for 15.4 from openSUSE Leap 15.4 - Get openSUSE

The contents of the sha256 files are:

86301a9196a124f9ac2aa5a4b828bb575d3e18db4c4a3cdb1f84fe2579ba81e5 openSUSE-Leap-15.4-CR-DVD-x86_64-Media.iso
4683345f242397c7fd7d89a50731a120ffd60a24460e21d2634e783b3c169695 openSUSE-Leap-15.4-DVD-x86_64-Media.iso

Whereas the actual file names are:

86301a9196a124f9ac2aa5a4b828bb575d3e18db4c4a3cdb1f84fe2579ba81e5  openSUSE-Leap-15.4-CR-DVD-x86_64-Build31.329-Media.iso
4683345f242397c7fd7d89a50731a120ffd60a24460e21d2634e783b3c169695  openSUSE-Leap-15.4-DVD-x86_64-Build243.2-Media.iso

Chksum values are good but as the file names are different sha256sum -c fails.

It has been this way for years. Nothing new.

The complete set with matching ISOs and sha256 can be found directly at the mirror:
https://download.opensuse.org/distribution/leap/15.4/appliances/iso/

And? If you download https://download.opensuse.org/distribution/leap/15.4/appliances/iso/openSUSE-Leap-15.4-CR-DVD-x86_64-Media.iso its name will not match the content of sha256 file. What’s more, it depends on which download tool you are using. Chromium resolves it to the “wrong” name while e.g. curl uses the original name.

Instead of commenting in your usual way, you could have read up. The mirrors provide matching sets of ISOs and sha256 indepentend of using chrome or curl or whatever. It’s easy to see and understand:

https://download.opensuse.org/distribution/leap/15.4/appliances/iso/openSUSE-Leap-15.4-CR-DVD-x86_64-Build31.329-Media.iso
https://download.opensuse.org/distribution/leap/15.4/appliances/iso/openSUSE-Leap-15.4-CR-DVD-x86_64-Build31.329-Media.iso.sha256

86301a9196a124f9ac2aa5a4b828bb575d3e18db4c4a3cdb1f84fe2579ba81e5  openSUSE-Leap-15.4-CR-DVD-x86_64-Build31.329-Media.iso

I’ll agree with @arvidjaar on this one.

I downloaded the file:

https://download.opensuse.org/distribution/leap/15.4/appliances/iso/openSUSE-Leap-15.4-CR-DVD-x86_64-Media.iso

I downloaded it twice.

For my first download, I used “wget”, and ended up with the file “openSUSE-Leap-15.4-CR-DVD-x86_64-Media.iso”.

For my second download, I used “aria2c” (which used the meta2 download method) and ended up with the file “openSUSE-Leap-15.4-CR-DVD-x86_64-Build31.329-Media.iso”. So the final file name does indeed depend on how it is downloaded. If you download with a browser, it will depend on the browser and perhaps on browser extensions.

What exactly?

Yes. And if you download “matching” set of openSUSE-Leap-15.4-CR-DVD-x86_64-Media.iso and corresponding sha256 they will not match.

The problem is not what is available on download, but that the official site to download openSUSE gets it wrong. And if you say “you must download different ISO under different name” the next obvious question will be “how do I know it is the same ISO? It is not what official site tells me to download”.

I was pointing out a way to circumvent the problem with the official donload page. If you access the mirror directly (no matter with a browser or whatever) you will see and find matching ISO/sha256 pairs as shown in this comment

And surprisingly the sha256sum -c will pass “OK” on this pairs…

And this way is also “official” as the link to the mirror is also presented on the advanced download page. So you download an official ISO and sha256 from an official openSUSE download server…
I only wanted to show a way for some users who have some basic knowledge how to access a mirror…

Yes, but it doesn’t actually circumvent the problem, depending on how you download.

I normally use “aria2c” for downloading, and I can run into the problem with that.

This uses the meta download. The meta-file for the download includes a list of mirrors and checksums for segment. This allows parallel downloading from various mirrors, which can speed things up. And the checksums improve the reliability.

But they do not prepare two versions of the meta file. So you finish up with the file name that the meta file is based on.