4.3. Verify Downloaded Files

Procedure 4.2. Verify File Checksums on Red Hat Enterprise Linux

1. Obtain checksum values for the downloaded file

   1. Navigate to https://access.redhat.com/jbossnetwork/. Login if required.
   2. Select your Product and Version.
   3. Select the package you want to verify to navigate to the Software Details page.
   4. Take note of the MD5 and SHA-256 checksum values.

2. Run a checksum tool on the file

   1. Navigate to the directory containing the downloaded file in a terminal window.
   2. Run md5 downloaded_file.
   3. Run shasum downloaded_file.
   Example output:

   [localhost]$ md5 jboss-dv-installer-6.0.0.GA-redhat-4.jar 
   MD5 (jboss-dv-installer-6.0.0.GA-redhat-4.jar) = 0d1e72a6b038d8bd27ed22b196e5887f
   [localhost]$ shasum jboss-dv-installer-6.0.0.GA-redhat-4.jar 
   a74841391bd243d2ca29f31cd9f190f3f1bdc02d  jboss-dv-installer-6.0.0.GA-redhat-4.jar
   

3. Compare the checksum values

   1. Compare the checksum values returned by the md5 and shasum commands with the corresponding values displayed on the Software Details page.
   2. Download the file again if the two checksum values are not identical. A difference between the checksum values indicates that the file has either been corrupted during download or has been modified since it was uploaded to the server. Contact Red Hat Support for assistance if after several downloads the checksum does not successfully validate.
   3. The downloaded file is safe to use if the two checksum values are identical.