Mac OS X: How to Verify a SHA-1 Digest

  • Last Modified: August 01, 2008
  • Article: HT1652
  • Old Article: 75510

Summary

This document describes how to verify a SHA-1 digest (also known as a checksum).

Products Affected

Mac OS X 10.4, Mac OS X 10.3, Mac OS X 10.2, Mac OS X 10.1, Mac OS X 10.0, Mac OS X 10.5

To verify a software update from Apple, which contains a SHA-1 digest, perform the following steps.

Important: Verifying the SHA-1 of a software update is optional, it is being provided on Apple software updates for those individuals who want to verify the authenticity of an update.

    1. Open Terminal.

    2. Type the following at the terminal prompt: /usr/bin/openssl sha1 [full path to file]

    Example: /usr/bin/openssl sha1 /Users/test/Documents/1024SecUpd2003-03-03.dmg

    The SHA-1 digest is displayed as: sha1 ([full path to the file])= [checksum amount]

    Example: SHA1(/Users/test/Documents/1024SecUpd2003-03-03.dmg) =2eb722f340d4e57aa79bb5422b94d556888cbf38

Additional Information

25490: "Mac OS X: About SHA-1 Digest and Software Downloads"

Not helpful Somewhat helpful Helpful Very helpful Solved my problem