Trouble Downloading Kali Linux 1.0.3 amd64 MD5 Checksum Fails

[kaliquestion]

I tried extensive way to download kali. each Time md5 check fails to match listed md5.
no problems with some other files downloading and checking. How do i fix this?

[g0tmi1k]

Please note the hash value on the download page is for sha1, not md5.

[kaliquestion]

Saw that. Several of these files finish 100mb+ above the listed file size. Do you know what would cause this?

[g0tmi1k]

How are you downloading Kali? Direct download or Torrent?
Does the checksum match up after the download completes?
And which files are larger than they should be?

[kaliquestion]

Direct download from kali.org/downloads and cdimage.kali.org
Output from sha1sum check didn't match for these files when compared to listed after it finished downloading.
The .iso files.

[charonsecurity]

I recommend using uTorrent and download it as a torrent file. It's often more reliable than an http download especially for very large files, and often faster.

[maverik35]

Are you using any download accelerator app?..If any, do not use it. Just download from kali's page.

[kaliquestion]

No, direct from kali. I have an image that matches but it has problems during the install (hangs at points, forced to hard restart) and when I get it to install it fails to start the GUI. Tried "/etc/init.d/gdm3 start" returns fake start stop daemon doing nothing. Run apt-get install dpkg --reinstall and get more errors.

[compuwar]

I recommend using uTorrent and download it as a torrent file. It's often more reliable than an http download especially for very large files, and often faster.

The Kali torrent file shows version 1.0.2 in the file name, but the current ISO is 1.0.3. My torrent download has a different sha1 and doesn't seem to work correctly.

Edit: Mistake, the sha1 is different for each version.

[thorin]

The Kali torrent file shows version 1.0.2 in the file name, but the current ISO is 1.0.3. My torrent download has a different sha1 and doesn't seem to work correctly.

Edit: Mistake, the sha1 is different for each version.

Really? You're going to jump into using a IT Security Assessment Linux Distribution when you don't even understand basic IT concepts like hash calculations?
Do you suppose there is a reason that babies don't pop out of the whomb and try to sprint in the first 5 seconds of life?
Do you suppose that there is a reason people use lifejackets and water-wings etc when teaching their kids to swim instead of just taking them up on the high board and bouncing them into the deep end?

[compuwar]

I understand basic hash calculations probably better than you do. I edited it because my original post said the hash values were the same for each download, and that was incorrect- and that's important to note, as a false report of that would be a bad thing[tm].

It doesn't change the fact that the torrent is a different version than the ISO when using the download link on the main site, nor does it change the fact that many of us are getting different results for the download than the correct images if the sha1 files on the site are to be believed. Since the main link goes to a form, there's no easy way for someone to find a torrent file for 1.0.3 or an ISO image for 1.0.2 if you start at http://www.kali.org/downloads/ which is apparently the preferred download location.

I've since found http://archive-2.kali.org/kali-images/ which gives me the option to torrent the current release or ISO the prior one. I've also checked downloads against http://archive-2.kali.org/kali-images/SHA1SUMS - thanks for the helpful post though- NOT...

[charonsecurity]

If you install the 1.0.2 or even earlier versions, and then run an upgrade it will be the latest. Another option, is to build Kali from source. I'm still seeding my KDE Build 1.0 and getting an average 20 seeds every day, and personally haven't had any issues upgrading to the latest stuff.

[maverik35]

Are you checking MD5?...It should be sha1..It might sound quite foolish but have you checked the sha1?....Sorry to be so basic.

[jpurcell]

I can confirm the download for amd64 has an incorrect sha1sum:

~/vms$ sha1sum kali-linux-1.0.3-amd64.iso
e5ff586c7bf17e2c0b1dc5056b8e6951b2fadc16 kali-linux-1.0.3-amd64.iso

This should be the following according to the webpage:

95a0eab94407d7ebf0ec6fbd189d883aa772d21d

[compuwar]

You got a bad download:

# sha1sum kali-linux-1.0.3-amd64.iso
95a0eab94407d7ebf0ec6fbd189d883aa772d21d kali-linux-1.0.3-amd64.iso