Java JRE 8 update 141 SHA Mismatch

Usage and Config Patch
1

I’ve manually cached the Java JRE 8 update 141 (32 and 64-bit) binaries, but was still seeing error upon deployment:

Download error: The requested URL does not pass this deployment’s download whitelist.

After manually caching the executables via a SHA1 calculator, I can see that there appears to be a SHA1 mismatch:

32-bit fixlet:
“jre-8u141-windows-i586.exe” → “74445e1c2c932f87ad90a55fb5da182f57dd637d”

32-bit manual value:
“jre-8u141-windows-i586.exe” → “3c36a58848ac75a9b2d8c447bb2b178eccb69d16”

64-bit fixlet:
“jre-8u141-windows-x64.exe” → “77cfba433ca2057e6aef6ac1f82f3a3679bf8533”

64-bit manual value:
“jre-8u141-windows-x64.exe” → “5aef235d43c2b292a4c2e243754753c296ecd8b2”

Can someone at IBM please advise? @BaiYunfei?

2

Interesting. I’m getting the correct fixlet values for the binaries I gathered (and renamed) on July 19th, following the release announcement from Oracle:
//32-bit
Q: (size of it, sha1 of it) of files "C:\Temp\74445e1c2c932f87ad90a55fb5da182f57dd637d"
A: 57215040, 74445e1c2c932f87ad90a55fb5da182f57dd637d

//64-bit
Q: (size of it, sha1 of it) of files "C:\Temp\77cfba433ca2057e6aef6ac1f82f3a3679bf8533"
A: 65369152, 77cfba433ca2057e6aef6ac1f82f3a3679bf8533

However, I agree that there seems to have been an update from Oracle. The following values are from the files I downloaded 10 minutes ago from the Oracle JRE page (http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html):
//32-bit
Q: (size of it, sha1 of it) of files "C:\Temp\jre-8u144-windows-i586.exe"
A: 57217088, 49901a5961c2cdd9a46930d4008a8f8d0b1aad27

//64-bit
Q: (size of it, sha1 of it) of files "C:\Temp\jre-8u144-windows-x64.exe"
A: 65365056, f1c74179507212cd853a87fa3b6a9ea764dea4ed

EDIT:
Doh. There has been an incremental release from Oracle, so the ones I just downloaded are version 8u144…

Release notes: http://www.oracle.com/technetwork/java/javase/8u144-relnotes-3838694.html

EDIT 2:
The Archived downloads page (http://www.oracle.com/technetwork/java/javase/downloads/java-archive-javase8-2177648.html) still contain the original 8u141 fixlets, which when I downloaded again just now seem to still match the fixlet hash values.
Q: (size of it, sha1 of it) of files "C:\Temp\jre-8u141-windows-i586.exe"
A: 57215040, 74445e1c2c932f87ad90a55fb5da182f57dd637d

Q: (size of it, sha1 of it) of files "C:\Temp\jre-8u141-windows-x64.exe"
A: 65369152, 77cfba433ca2057e6aef6ac1f82f3a3679bf8533

Did you download the tar’d updaters as opposed to the offline ones, perhaps?

1 Like
3

Nope; downloaded the offline binaries directly from the Oracle link in the fixlet (as you can see by the size). Values I get after downloading the latest binaries matches what you see:

Q: (size of it, sha1 of it) of files “C:\Temp\jre-8u141-windows-i586.exe”
A: 57217088, 49901a5961c2cdd9a46930d4008a8f8d0b1aad27
T: 304.103 ms

Q: (size of it, sha1 of it) of files “C:\Temp\jre-8u141-windows-x64.exe”
A: 65365056, f1c74179507212cd853a87fa3b6a9ea764dea4ed
T: 521.310 ms

Downloading the archived versions, I see they do indeed match the fixlet SHAs:

Q: (size of it, sha1 of it) of files “C:\Temp\jre-8u141-windows-i586.exe”
A: 57215040, 74445e1c2c932f87ad90a55fb5da182f57dd637d
T: 426.273 ms

Q: (size of it, sha1 of it) of files “C:\Temp\jre-8u141-windows-x64.exe”
A: 65369152, 77cfba433ca2057e6aef6ac1f82f3a3679bf8533
T: 498.104 ms

So I’ll just use these for now, until IBM update the fixlets to the newer values.

Thanks!

4

The SHA mismatch is because there was a new version of JRE released, 8u144.

We have published fixlets for JRE 8u144, please try those.

1 Like
5

Working great, thanks! :slight_smile: