Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Contrail] Different SHA1 checksum is seen in ContrailVM.mf in ESXi-Contrail package

0

0

Article ID: KB35960 KB Last Updated: 20 Jun 2020Version: 1.0
Summary:

In some versions of the ESXi-ContrailVMCentOS7.7-1_2005.62-ovf.tar file, a different value is used in the ContrailVM.mf file from the actual SHA1calculation result of ContrailVM.ovf.

This article shows the details and workaround for this issue until a fixed version is released.

Symptoms:

SHA1 Checksum value of the ovf file in ESXi-ContrailVMCentOS7.7-1_2005.62-ovf.tar is incorrect. If this file is used in this state, deployment could not be successful.

Below is the R2005 output.  SHA1(ContrailVM.ovf) shows a different SHA1 hash.

$ tar xfv ESXi-ContrailVMCentOS7.7-1_2005.62-ovf.tar

-rw-r--r--. 1 user user 1247351808 Oct 15  2019 ContrailVM-disk-1.vmdk
-rw-r--r--. 1 user user        134 Oct 15  2019 ContrailVM.mf
-rw-r--r--. 1 user user       6627 Oct 15  2019 ContrailVM.ovf

$ cat ContrailVM.mf
SHA1(ContrailVM-disk-1.vmdk)= 78504c032b854353d2b2cf432b964b0316b638d0
SHA1(ContrailVM.ovf)= da2398e9b40ef77a71e3e2a8c8eb93083e308843

$ sha1sum ContrailVM.ovf
6bb4c0b7d0106ccf304a479440375bec3cbc7290  ContrailVM.ovf

$ sha1sum ContrailVM-disk-1.vmdk
78504c032b854353d2b2cf432b964b0316b638d0  ContrailVM-disk-1.vmdk  <-- This file shows correct value.
Cause:

Version 5.0.0 had correct hash, erroneous hash started from 5.0.1.

$ tar xf ESXi-ContrailVMCentOS7.4-4_5.0.0-0.40-ovf.tar

-rw-r--r--. 1 user user  711052800 Apr  6  2018 ContrailVM-disk1.vmdk
-rw-r--r--. 1 user user        135 Apr  6  2018 ContrailVM.mf
-rw-r--r--. 1 user user       7775 Apr  6  2018 ContrailVM.ovf

$ cat ContrailVM.mf
SHA1(ContrailVM-disk1.vmdk)= a61488f1667baddda063a2ec1084ae42441a503d
SHA1(ContrailVM.ovf)= b64ed44b25164db2f7aa551acb7e8fe1265a0508

$ sha1sum ContrailVM.ovf
b64ed44b25164db2f7aa551acb7e8fe1265a0508  ContrailVM.ovf
$ tar xf ESXi-ContrailVMCentOS7.5-6_5.0.1-0.214-ovf.tar

-rw-r--r--. 1 user user 1035135488 Aug 15  2018 ContrailVM-disk1.vmdk
-rw-r--r--. 1 user user        135 Aug 15  2018 ContrailVM.mf
-rw-r--r--. 1 user user       7639 Aug 15  2018 ContrailVM.ovf

$ cat ContrailVM.mf
SHA1(ContrailVM-disk1.vmdk)= 15f23dd517af238b0aef1161460759a25846768b
SHA1(ContrailVM.ovf)= 2e504a31c07457cea60edeef2158ac19f03407c0

$ sha1sum ContrailVM.ovf
3045b257072f5d1c816d975cd5c73c52cad06501  ContrailVM.ovf
Solution:

By editing ContrailVM.mf with the correct value manually, deployment will be completed successfully as a workaround.

Overwrite with the following command or directly edit ContrailVM.mf file.
$ cp ContrailVM.mf ContrailVM.mf.bk
$ sed -i "s/$(cat ContrailVM.mf | awk '/ovf/{print $2}')/$(sha1sum ContrailVM.ovf | awk '{print $1}')/" ContrailVM.mf

$ cat ContrailVM.mf
SHA1(ContrailVM-disk-1.vmdk)= 78504c032b854353d2b2cf432b964b0316b638d0
SHA1(ContrailVM.ovf)= 6bb4c0b7d0106ccf304a479440375bec3cbc7290
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search