pfsense.org website is missing SHA256 checksum for USB serial image

poechii

I’m not sure where exactly to post this, but for some reason or another, as shown in my screenshots on an iPhone below, the SHA256 checksum for the USB serial image for v2.6.0 isn’t available on the pfsense.org website on my end while others are and I have not found a previous thread on this issue. If there is, then I apologize.

I have also tried other devices, even through a VPN so it doesn’t seem like this is just me. I think this is a critical bug as verifying the image is (and shall be) important. In my case, I have dealt with MITM and DNS hijacking in the past so it’s critical for me to verify the downloads. If anyone has the correct checksum, please post it.

The link https://www.pfsense.org/hashes/pfSense-CE-memstick-serial-2.6.0-RELEASE-amd64.img.gz.sha256 to the checksum file is also broken on my end.

Screenshots on iPhone are below under spoilers:

USB VGA image does have a SHA256 checksum:
USB serial image does not.
Broken link to USB serial image sha256 checksum file:

EDIT: fixed minor markdown formatting typo

stephenw10

Hmm, interesting. The hash itself is there:
https://files.netgate.com/hashes/pfSense-CE-memstick-serial-2.6.0-RELEASE-amd64.img.gz.sha256

Let me check....

poechii

@stephenw10 Yes, that link works for me. And it is indeed interesting.

stephenw10

Ok, that's fixed. Thanks for letting us know.

poechii

@stephenw10 Unfortunately, it is not fixed as far as Safari 15.3 on macOS Big Sur 11.6.4 goes. However, it works on Firefox 97.0.1 with the same system. I attached relevant screenshots below.

Can anyone corroborate this on their end just to make sure that it's not just me? Thanks in advance.

Safari 15.3

Firefox 97.0.1

EDIT: Added Firefox version

poechii

False alarm, I wiped all state from Safari and it now works. Thanks so much for fixing this. @stephenw10

GertJanT

@radicalentity It wasn´t just safari. I had the same issue on linux-mint with firefox also yesterday.
But, the good news is the link to the checksum is fixed indeed.

mikelward

Seems to be the case again for 2.7.0. https://forum.netgate.com/topic/181911/missing-sha256-checksums

stephenw10

Hmm, yup. Checking....