DaHai8
Posts: 55
Joined: Fri Jul 31, 2015 9:21 am

Jessie Lite Release Date & SHA-1 Don't Match

Mon Feb 29, 2016 3:26 pm

The Release Date and SHA-1 for Jessie Lite on the Download Page:
2016-02-29
0d58e68d62cb3e55bdc73860a6be2281783b8c0f

Downloaded File name says: 2016-02-26-raspbian-jessie-lite.img
SHA-1 = 0D2799CEB0C263ABE59D6DD64B50ADEAA92BBB55

User avatar
rpdom
Posts: 17590
Joined: Sun May 06, 2012 5:17 am
Location: Chelmsford, Essex, UK

Re: Jessie Lite Release Date & SHA-1 Don't Match

Mon Feb 29, 2016 6:23 pm

The SHA-1 is for the zipped file, not the .img file it contains.

User avatar
DougieLawson
Posts: 39895
Joined: Sun Jun 16, 2013 11:19 pm
Location: A small cave in deepest darkest Basingstoke, UK
Contact: Website Twitter

Re: Jessie Lite Release Date & SHA-1 Don't Match

Tue Mar 01, 2016 12:50 am

I've got Jessie, Jessie Lite and NOOBS (downloaded from the torrents)

Code: Select all

4a841dffd02197548bf2329b90a0a44eeeebb4ab  2016-02-26-raspbian-jessie.zip
0d58e68d62cb3e55bdc73860a6be2281783b8c0f  2016-02-26-raspbian-jessie-lite.zip
feb5ad2e16ffe8f7937a961830e746b14e29a4a2  NOOBS_v1_8_0.zip
Note: Any requirement to use a crystal ball or mind reading will result in me ignoring your question.

Criticising any questions is banned on this forum.

Any DMs sent on Twitter will be answered next month.
All fake doctors are on my foes list.

bljardkungen
Posts: 6
Joined: Fri Aug 03, 2012 7:23 pm

Re: Jessie Lite Release Date & SHA-1 Don't Match

Tue Mar 01, 2016 1:01 am

I don't got a answer but I came here because I noticed the same thing.
My best guess so far is that they made the final packing 2016/02/26 and released the software on the site today 2016/02/29 the same day the pi was available in the store?

Do any know the answer?

stderr
Posts: 2178
Joined: Sat Dec 01, 2012 11:29 pm

Re: Jessie Lite Release Date & SHA-1 Don't Match

Tue Mar 01, 2016 1:10 am

bljardkungen wrote:I don't got a answer but I came here because I noticed the same thing.
I think given what recently happened with the Mint distribution, http://blog.linuxmint.com/?p=2994 , it makes a lot of sense to watch out with these redirectors to mirrors because sometimes they are compromised.

User avatar
DougieLawson
Posts: 39895
Joined: Sun Jun 16, 2013 11:19 pm
Location: A small cave in deepest darkest Basingstoke, UK
Contact: Website Twitter

Re: Jessie Lite Release Date & SHA-1 Don't Match

Tue Mar 01, 2016 1:39 am

bljardkungen wrote: My best guess so far is that they made the final packing 2016/02/26 and released the software on the site today 2016/02/29 the same day the pi was available in the store?
It looks like it was ready three days before it was published and someone forgot to change the filename.
Note: Any requirement to use a crystal ball or mind reading will result in me ignoring your question.

Criticising any questions is banned on this forum.

Any DMs sent on Twitter will be answered next month.
All fake doctors are on my foes list.

ShiftPlusOne
Raspberry Pi Engineer & Forum Moderator
Raspberry Pi Engineer & Forum Moderator
Posts: 6239
Joined: Fri Jul 29, 2011 5:36 pm
Location: The unfashionable end of the western spiral arm of the Galaxy

Re: Jessie Lite Release Date & SHA-1 Don't Match

Tue Mar 01, 2016 2:31 am

The file name corresponds to when it was created, not when it was uploaded. Generally, the 'release' date written on the download page is actually the date that the image was created and is almost always a few days behind. I've edited the download page with the 'correct' release date. Thanks.

DaHai8
Posts: 55
Joined: Fri Jul 31, 2015 9:21 am

Re: Jessie Lite Release Date & SHA-1 Don't Match

Tue Mar 01, 2016 10:28 am

Thanks!
Always want to make sure I'm getting the latest build! :)
P.S. Might want to mention on the Download page that the SHA-1 is for the ZIP and not the IMG file.
Personally, I'd prefer the SHA-1 for the IMG file - but that's just me.

User avatar
chrisoh
Posts: 217
Joined: Sun Dec 06, 2015 8:50 pm
Location: Essex, UK

Re: Jessie Lite Release Date & SHA-1 Don't Match

Tue Mar 01, 2016 10:38 am

DaHai8 wrote:Thanks!
Always want to make sure I'm getting the latest build! :)
P.S. Might want to mention on the Download page that the SHA-1 is for the ZIP and not the IMG file.
Personally, I'd prefer the SHA-1 for the IMG file - but that's just me.
So you would unzip an unverifiable file to get to a possibly unverified file? Defeats the security of the SHA-1 me thinks
Raspberry Pi 3 model B Idle @ 250mA
  • HDMI +200mA
  • Minecraft 1.9 Server +100mA
  • 2.4Ghz dongle +20mA

Return to “Raspberry Pi OS”