[c-nsp] MD5 checksums for IOS images

[Ziv Leyes]

Taken from here:
http://www.cisco.com/warp/public/707/cisco-sr-20080516-rootkits.shtml

"For those customers whose www.cisco.com account does not provide access to the Cisco IOS Upgrade Planner tool and hence cannot obtain the Cisco calculated, known-good MD5 hash value for a given Cisco IOS software image, or for those customers that would prefer to automate the process of validating MD5 hashes using their own tools, Cisco is making available a compressed file including the Cisco IOS software image name and known-good MD5 hash for all 12.0-based, 12.1-based, 12.2-based, 12.3-based and 12.4-based Cisco IOS software releases.

This file can be found at http://www.cisco.com/web/tsweb/psirt/cisco-sr-20080516-rootkits.zip and contains a second compressed file (a set of data files and a document explaining the file format) and a detached PGP signature for the second compressed file. The file has been signed by the current Cisco PSIRT PGP key. Information on how to obtain the current Cisco PSIRT PGP key can be found in the document entitled "Cisco Security Vulnerability Policy", available at http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html.

We recommend customers to uncompress the file and verify the signature for the second file before using the data files for any verification purposes."

Hope this helps,
Ziv


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Church, Charles
Sent: Tuesday, August 12, 2008 6:42 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] MD5 checksums for IOS images

Anyone,

    Is there a central place to find MD5 hashes for IOS images, other
than going through the process of getting to the point of almost
downloading each image?  We're thinking about implementing processes to
verify image integrity, have about 40 or so different images we use
currently on all our various gear.

Thanks,

Chuck
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/





************************************************************************************
This footnote confirms that this email message has been scanned by
PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses.
************************************************************************************






 
 
************************************************************************************
This footnote confirms that this email message has been scanned by
PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses.
************************************************************************************