Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 7 replies
  • Subscribers 6 subscribers
  • Views 16422 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

checksum doesn't match

gail2

Thanks for the free product.

I downloaded version 9 from the Sophos website but the checksum for the file savosx_90_he.zip doesn't match the one here:

http://openforum.sophos.com/t5/Sophos-Anti-Virus-for-Mac-Home/Checksums-for-savosx-90-he-zip/m-p/14719/highlight/true#M6851

The link to the checksums in this post comes back file does not exist.

openforum.sophos.com/.../39

This was after the first 2 tries at downloading gave me zip files that wouldn't open and returned the message "Unable to archive . . . Error 1 - Operation not permitted."  Console said "ditto: Sophos Anti-Virus Home Edition.app/Contents/Install/Root/vdl/c8aea79d16c1cf0467ec24827f20b667b575a05e60b3d9f787199db480278507: No such file or directory" and "ditto: couldn't read pkzip signature".

The 3rd time I downloaded it, it opened and gave me a file called "Sophos Anti-Virus Home Edition.app".  I was expecting a dmg file, so this also seemed odd.  

I'm trying to install to a Mac Mini running Snow Leopard.  I have version 8 on my MB Pro with Snow Leopard and it works fine.  I see I have to upgrade to Version 9 soon and I want to make sure the program is safe to install.  Feeling a little unsure with the recent Heartbleed exploit in the news.

Thanks for your help.

:1016985


This thread was automatically locked due to age.
  • 0
    gail2 wrote:

    I downloaded version 9 from the Sophos website but the checksum for the file savosx_90_he.zip doesn't match the one here 

    We update the installer approximately once a month, which means the checksums posted back in November (in that post you linked to) would have been replaced.

    The current version posted to the website is 9.0.8 and checksum:

    6a871dbcef238f4fdbb8f068ac556691abb965a430e6fce0061d735404f352ae SophosHomeEditionInstaller.zip

    Note that we'll be updating the posted version to 9.0.10 soon, its checksum will be:

    8811cb29c16e6da6875fdb0002abda7e1b17e2e43f7f3ae6105d85898805cfbf SophosHomeEditionInstaller.zip
    gail2 wrote:

    The 3rd time I downloaded it, it opened and gave me a file called "Sophos Anti-Virus Home Edition.app".  I was expecting a dmg file, so this also seemed odd.  

    This is correct (after its expanded from the .zip). We don't package it using a DMG any longer starting with version 9.0, our installer is an application that you can simply double-click. If you have any doubt to its authenticity you can check the digitial signature via the command line:

    codesign -dvv "Sophos Anti-Virus Home Edition.app"

    and this will tell you if its signed (it is) and whether the code signatures are valid e.g. not been tampered with. This is what it said for me, run against 9.0.8:

    $ codesign -dvv "Sophos Anti-Virus Home Edition.app"
Executable=/Users/bobcook/Downloads/Sophos Anti-Virus Home Edition.app/Contents/MacOS/Installer
Identifier=com.sophos.macendpoint.Installer
Format=bundle with Mach-O universal (i386 x86_64)
CodeDirectory v=20100 size=781 flags=0x0(none) hashes=32+3 location=embedded
Signature size=4205
Authority=Developer ID Application: Sophos
Authority=Developer ID Certification Authority
Authority=Apple Root CA
Signed Time=2014-02-05 10:46:36 AM
Info.plist entries=23
Sealed Resources rules=5 files=83
Internal requirements count=1 size=288

    We are looking into a better way to get this information posted regularly.

    :1017003
  • 0
    gail2 wrote:

    The link to the checksums in this post comes back file does not exist.

    openforum.sophos.com/.../39

    Thanks for the heads up.  I've updated that post with fresh instructions.

    :1017017
  • 0

    Thanks Bob for the detailed response so a non-techie like me could follow it.  I re-downloaded the file and the checksum matched.  I also did what you suggested to check the signature.  Everything was the same as yours except in the 5th line, I got size=641 and hashes=25+3.  I don't know what those mean but since the command worked and it said Sophos, I figured that means it was signed by you.  I went ahead and installed the program and so far it's working fine and I haven't noticed any slowdown in Safari.

    For future reference, what would it say if the code signatures had been tampered with?

    Thanks again for the great free program and the help.

    :1017055
  • 0
    gail2 wrote:

    For future reference, what would it say if the code signatures had been tampered with?

    This is what it shows on my system, when I corrupt the 9.0.8 installer:

    $ codesign -dvv ~/Downloads/Sophos\ Anti-Virus\ Home\ Edition.app/
/Users/bobcook/Downloads/Sophos Anti-Virus Home Edition.app/: invalid signature (code or signature have been modified)

     Hope that helps!

    :1017063
  • 0

    Thanks Bob, that's really helpful!  

    :1017073