Add checksums for official DMG files from Apple

[gapf2010]

This link: https://support.apple.com/en-us/HT211683 contains (as of 2021-08-01) DMG downloads for OSX 10.10 and 10.11, as well as MacOS 10.12. Please add these checksums to the list:

SHA1(10.10-Yosemite/InstallMacOSX.dmg)= c542681961cc7fafb9c15bfd4af152a3a57f07fa SHA1(10.11-El-Capitan/InstallMacOSX.dmg)= 21e45136e34c6f805e0f1977e38d6ff029a9a1e2 SHA1(10.12-Sierra/InstallOS.dmg)= 9ba989d30e3548341fc8f5847e856709cb5c67c2

Thanks!

[sapperlott]

I can confirm those but the SHA1 checksums for the InstallESD.dmg contained in these packages are already on the list. What I couldn't find in the list are the Lion and Mountain Lion releases available for download directly from Apple.

Here's my list:

Lion (v10.7.5 build 11G63):

• URL: https://updates.cdn-apple.com/2021/macos/041-7683-20210614-E610947E-C7CE-46EB-8860-D26D71F0D3EA/InstallMacOSX.dmg
• InstallMacOSX.dmg SHA1: 420889a7e596343d67b247f69a438d0f20d310e8
• InstallESD.dmg SHA1: bb6fab93450048f277e075f8010016570213757d

Mountain Lion (v10.8.5 build 12F45):

• URL: https://updates.cdn-apple.com/2021/macos/031-0627-20210614-90D11F33-1A65-42DD-BBEA-E1D9F43A6B3F/InstallMacOSX.dmg
• InstallMacOSX.dmg SHA1: 4b9bc933f50abe824b93ba9eebd8f57f1609ccdb
• InstallESD.dmg SHA1: e3c5b7b17f8344598ffaf079cb42cb495196b633

Yosemite (v10.10.5 build 14F27):

• URL: http://updates-http.cdn-apple.com/2019/cert/061-41343-20191023-02465f92-3ab5-4c92-bfe2-b725447a070d/InstallMacOSX.dmg
• InstallMacOSX.dmg SHA1: c542681961cc7fafb9c15bfd4af152a3a57f07fa
• InstallESD.dmg SHA1: 39c52ff92a4c965b4ca4608a1788732165164abb

El Capitan (v10.11.6 build 15G31):

• URL: http://updates-http.cdn-apple.com/2019/cert/061-41424-20191024-218af9ec-cf50-4516-9011-228c78eda3d2/InstallMacOSX.dmg
• InstallMacOSX.dmg SHA1: 21e45136e34c6f805e0f1977e38d6ff029a9a1e2
• InstallESD.dmg SHA1: 27a05174a5cc593d5ff6d61822e9e07ba6aa2288

Sierra (v10.12.6 build 16G29):

• URL: http://updates-http.cdn-apple.com/2019/cert/061-39476-20191023-48f365f4-0015-4c41-9f44-39d3d2aca067/InstallOS.dmg
• InstallOS.dmg SHA1: 9ba989d30e3548341fc8f5847e856709cb5c67c2
• InstallESD.dmg SHA1: df682c501d1013435d5c3cb12a26a6fefcbceed0
• Note: needs fix before being able to use createinstallmedia https://forums.macrumors.com/threads/not-a-valid-volume-mount-point-cant-make-bootable-drive.1935673/post-28197924

[gapf2010]

I reinstalled my Macbook pro from scratch using the Snow Leopard DVD, and after fully updating it, I went to the Apple store and downloaded the OSX Lion installer. It downloaded correctly, but to my surprise, the sha1sum of the InstallESD.dmg file in the download is not here:

[gpulido@rhlaptop osx]$ sha1sum InstallESD.dmg 
3fae5fe16c7dda2c0fcc3afc49ec1724122a9617  InstallESD.dmg
[gpulido@rhlaptop osx]$ ls -l InstallESD.dmg 
-rw-r--r--. 1 gpulido gpulido 4719584394 Oct  9 13:06 InstallESD.dmg
[gpulido@rhlaptop osx]$ 

Can it be added to the list, please?

[1alessandro1]

For Lion and Mountain Lion, the official builds which come from Apple's servers are the following:

• Lion: https://updates.cdn-apple.com/2021/macos/041-7683-20210614-E610947E-C7CE-46EB-8860-D26D71F0D3EA/InstallMacOSX.dmg

• Mountain Lion: https://updates.cdn-apple.com/2021/macos/031-0627-20210614-90D11F33-1A65-42DD-BBEA-E1D9F43A6B3F/InstallMacOSX.dmg

Users are encouraged to download and extract the installer on compatible machines, so that we can push the hashes from InstallESD.dmg or similar, since these images are only containers.

[Juesto]

Those packages should be possible to extract on any mac with tools such as suspicious package for InstallESD.dmg checksums. @1alessandro1

[1alessandro1]

@Juesto I've tried with pacifist, no luck so far. Maybe something converts/extracts the .pkg to obtain the InstallESD.dmg

[Juesto]

Suspicious Package should be able to. EDIT: Nevermind, but still should be possible with pacifist, its in the resources tab i recall being possible to extract that way @1alessandro1

[Juesto]

InstallESD.dmg checksums: Lion: 79e39ccb6f8a8c40e500be55a9bf8de0275bd669 Mountain Lion: b8fa63882f06b52eb73f6ecc6661858de32e70e9 (MacMini7,1 Late 2014, go figure why i got a different checksum since i validated the data is correct and it's apple downloaded, and im on a platform that technically doesnt support those) i extracted it in catalina, it throws an error but pressing continue affects nothing, it does fully extract, disk mounter could verify it @1alessandro1 :)

[Juesto]

@1alessandro1 sorry for the additional bump but pacifist indeed works after all.