Downloaded OS Combo Update's SHA1 Checksum doesn't match Apple's

I never use Software Update to update OS versions, but instead download the latest "Combo" update from Apple's website. Prior to installing the update, I confirm the file integrity of the downloaded file by checking its SHA1 checksum code with the one published by Apple on the update's download page. I use a utility called "SUM+GEN" to do this rather than using OS X's Terminal. It's very easy and for 4 years I've never had a problem -- until now. However, this is the first time I have attempted to update a Leopard OS.

The SHA1 # that I'm getting for the downloaded update file (OS 10.5.8 Combo Update) does not match the one published by Apple. So I downloaded the update file again and the SHA1 # I get is *exactly the same as the first downloaded file*, which still doesn't match the SHA1# published by Apple.

Below are the SHA1 checksum #'s:
Published by Apple: SHA 1 digest=0a88c9ecfbe08faf1a2307929c67f38b4822dfcb
What I'm getting (twice): SHA1(/.../Desktop/MacOSXUpdCombo10.5.8.pkg)= 4b6ab33564a9217870969fa579a5a5e847467a7f

NOTE: When I click on the downloaded "Package" file, it automatically launches the installer, rather than presenting an OS X install file. The SHA1# that I'm getting is for this Package file, the only file I have to check. Could Apple's published SHA1# be for the actual install file that I'm never seeing? I hesitate to install this OS update until I'm sure the downloaded file is OK. Thanks.

Mac Mini (2009); 12" G4 PowerBook w. 768 RAM; PowerMac G4 MDD dual 1 MHz;, Mac OS X (10.5.6), 2 Gb RAM, Radeon 9800/256DDR, SATA Card and drive, PCI Fan

Posted on Dec 2, 2009 10:11 AM

Reply
10 replies

Dec 2, 2009 12:12 PM in response to baltwo

Thanks everyone, but I still have the problem.

The downloaded files I received from both Apple's OS Update page and their Support download page (that Dimaxum suggested) are all named MacOSXUpdCombo10.5.8.pkg, with each appearing as a box icon in a window (on the Desktop) titled "Mac OS X Update Combined" and are listed in the left column of that window under "devices" w. a drive icon. No other files are present on my desktop (download destination). No .dmg file present anywhere to check its SHA1#.

When I double-click on the .pkg file, the installer begins -- rather than "unpacking" and making a .dmg file available.

I am doing nothing but clicking on "download" from these web pages, and then double-clicking on the file I receive -- a .pkg file. Then an installation window appears with "Welcome to the Mac OS X Update Combined Installer." Thanks.

Dec 2, 2009 2:13 PM in response to Photon3

AFAIK and its been this way for years, the download is a dmg file, which automounts as *Mac OS X Update Combined*, opening a window with the MacOSXUpdCombo10.5.8.pkg displaying. Somewhere on your machine, maybe in the trash, is the dmg file that you checksum. Additionally, check Safari->Preferences->Remove download list items isn't showing Upon Successful Download.

Dec 2, 2009 3:03 PM in response to baltwo

I did a Spotlight search for .dmg files and found the Combo Update file listed as being *on the Desktop*. I clicked on this listing and only the .pkg file appeared on the desktop and all it would do is start installation. 😟

I clicked on my system drive icon on the desktop. Then I went to "Desktop" under "Places" and sure enough, a Combo .dmg file was listed (even though it didn't appear on the desktop). I double-clicked on it and the .pkg file in a window appeared as usual, but the .dmg file ALSO appeared on the desktop. The SHA1 checksum for it checked out, so installation is now done.

There must be something unusual about my system, a new Mac Mini, that is causing this unusual behavior. I have had no problems with downloading any other files. Thanks for your help.

Dec 2, 2009 4:21 PM in response to Photon3

Thanks for the feedback. The first thing I'd try would be to change the downloads location in Safari from the Desktop to the /Users//Downloads folder and then download the combo update again. The image should mount and a window should pop up with the .pkg file showing in it. Additionally, the .dmg file should be in the Downloads folder.

Jan 18, 2010 3:12 PM in response to baltwo

I am having a problem that I think is related, I have been trying to do the same software update with no success. When I run the disc permission repair, all the repaired permissions have something about the wrong code on them.

I download okay, but when I try to install, it says verification failed- usually invalid checksum. However the latest reply is codec overrun. sometimes it says validation faile.

I have downloaded Onyx and it said there was a volume problem. I used the install disc ( that came was tiger vers 11) to repair the disc- said it repaired the volume.
I have started using the CMD t S button, which said there was a problem with the volume, and then repaired it again.

I have tried downloading seperately from the site/ using software update. Still no success.
I am using a MACBOOK that was Tiger- upgraded to Leopard . Is my husbands laptp, he is not much of an IT man, and it doesnt appear to have done any MAC software updates- is still version 10.5. All the other updates itunes etc have always worked.

I have run the techtool that came with the apple care package and that said everything was okay.
Any ideas on what I can try next - day 3 trying to fix it.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Downloaded OS Combo Update's SHA1 Checksum doesn't match Apple's

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.