[pca] how to verify md5(from CHECKSUMS file) of patches downloaded

[Michele Vecchiato]

Ok, I'm a paranoid person ;-), but how does pca to verify that the patch
downloaded from Oracle site is not corrupt? I search on PCA ML archive
but no answer...

You have never done this kind of testing?

To answer this question made a shell script that downloads the file
CHECKSUMS (https://getupdates.oracle.com/reports/CHECKSUMS) and look for
MD5 of each patch in my cache of PCA proxy server(use this pipe command
"/usr/sfw/bin/ggrep -A 1 <patchfilenameonmycache> CHECKSUMS
| /usr/bin/grep MD5 | awk '{print $2}'"). This value is compared with
that value calculated in the local (digest-a md5
<patchfilenameonmycache>).

Now where am I wrong? Because i don't understand that there are over
2130 patches in my cache pca-proxy server, of 145 can not find the MD5
file checksums, and 10 have a different MD5 (patch corrupted) from that
contained in the file CHECKSUMS.

For example don't find MD5 into CHECKSUMS(published at Tue Dec 14
17:30:41 MST 2010) file for:

112960-69.zip
113039-25.zip
113077-25.zip
113225-17.zip
113225-18.zip
113718-05.zip
114006-04.zip
114356-19.zip
114476-10.zip
114636-05.zip
115077-11.zip
115835-05.zip
116506-03.zip
118666-24.zip
118667-24.zip
[...]

For example MD5 wrong for:

108964-11.zip MD5 form CHECKSUMS file: e70792ef3822466e121ad578861ac396
from verify: 0c5806989bfa9a2062daa0bec428f53f
113859-04.zip MD5 form CHECKSUMS file: 3829f5c94f7f2de6102328ca7428ca83
from verify: bb29f6855a809053be3552b022ed07b0
116380-01.zip MD5 form CHECKSUMS file: d1de0677b0ffc6b581409aec7cafc307
from verify: 826ec2e7ed5a7803d98c4085ac7020db
119313-29.zip MD5 form CHECKSUMS file: 6bbd694fca7ca753034bc03c435f0918
from verify: 1103019f7886fdc5fcea4b16b2145637
120011-14.zip MD5 form CHECKSUMS file: 00a0719034b638d48427104da886ffc2
from verify: 8078c6a0ab8db847e8bf411c908a571c
124358-07.zip MD5 form CHECKSUMS file: b0dccd6d6f61f47c005346ab033bfd7c
from verify: 0ad14a4020517067a0e00b15169cbce4
127127-11.zip MD5 form CHECKSUMS file: c2bf6c07976f113148a0f75a762f2140
from verify: a1ce22de9e3fe544d7cffc2de4070a0c
138754-02.zip MD5 form CHECKSUMS file: 5cd99149ab77a4cb26547f613a0c3ac5
from verify: dcbd0637f27d593cc2da24d06bc6aeff
138755-01.zip MD5 form CHECKSUMS file: ff18e0edeca94e19ba974bdc72fa9a9e
from verify: 5230a352911dcf61f016a959759eb6f3
141396-01.zip MD5 form CHECKSUMS file: 26ec847e036faed6a048b301a89d8c5f
from verify: 294e2736dabffbee3aa2d8ac2b645a3c

Any idea?
Thanks
Michele

P.S.: excuse me for my bad english.

-- 
Blog:  http://michelevecchiato.wordpress.com