SRX Services Gateway
Highlighted
SRX Services Gateway

How MD5 checksum works to confirm images

‎10-28-2015 08:21 AM

Hello,

 

I want to confirm how juniper secures its devices and image to prevent hackers who would want to modify the images in order to be able to have a back door to the network thereby making the network vulnerable. I heard juniper uses MD5 checksum to achieve this. Now my question is how would you confirm that the image has been modified/comprised.

 

thanks in anticipation.

 

Chinedu

3 REPLIES 3
SRX Services Gateway
Solution
Accepted by topic author Chinedu.Onwurah
‎10-29-2015 01:19 AM

Re: How MD5 checksum works to confirm images

[ Edited ]
‎10-28-2015 08:46 PM

Hi Chinedu.Onwurah,

 

Once you have the junos loaded on the device you can run the below command;

> file checksum md5 <pathname> filename

 

You will get a md5 value as the output. <output 1>

 

After that go to the software download page and select the product and the version.

You will get something like below;

 

Install Package Checksum Release Format Size File Date
SRX5000 Series MD5 SHA1 15.1X49-D20 tgz 549,863,886 21 Sep 2015

 

Now click on the MD5 SHA1 link  you will get the value of MD5 , it will be <output 2> . Now you can compare the two values and  confirm if they are same the file is valid and not tampered with.

 

Shailesh
[KUDOS PLEASE! If you think I earned it!
If this solution worked for you please flag my post as an "Accepted Solution" so others can benefit..]
SRX Services Gateway

Re: How MD5 checksum works to confirm images

‎10-29-2015 01:19 AM

Thanks SSN, I appreciate.

SRX Services Gateway

Re: How MD5 checksum works to confirm images

‎10-29-2015 01:34 AM

You're welcome! Smiley Happy

Shailesh
[KUDOS PLEASE! If you think I earned it!
If this solution worked for you please flag my post as an "Accepted Solution" so others can benefit..]