Skip to main content
Participant
November 11, 2016
Answered

Where are the checksums for Flash Player?

  • November 11, 2016
  • 1 reply
  • 1464 views

Considering there have been some fake Flash packages distributed and possibly downloaded by users. It would be excellent if Adobe provided checksums for their packages. There must be a way to do this.

When I attempt to install a package I downloaded from Adobe I even get a warning. “Install Adobe Flash Player” is an application downloaded from the Internet. Are you sure you want to open it?

This topic has been closed for replies.
Correct answer _maria_

Flash Player installers are digitally signed.  You can check to see if they are signed by Adobe:

  1. Launch Terminal (/Applications/Utilities/Termina.app)
  2. At the prompt Type: codesign -vvd <path to Flash Player.app> [ENTER]
    • for example: codesign -vvd /Volumes/Adobe\ Flash\ Player\ Installer/Install\ Adobe\ Flash\ Player.app
  3. The result should have the following in the output:

    Authority=Developer ID Application: Adobe Systems, Inc.

    Authority=Developer ID Certification Authority

    Authority=Apple Root CA

1 reply

_maria_
Legend
November 11, 2016

Hi,

We don't currently post the checksums for the installers.  I understand you're concern.   I'll forward your comment to the appropriate team for consideration.  As for the warning you're seeing, I'm guessing you're on a Mac.  This is standard security notification on Mac when launching an app installer downloaded from the internet.


If you provide the name of the file you're using, I can post the checksum for it.  If it's the online installer, post the OS and browser combination you used to download it

--

Maria

jprokosAuthor
Participant
November 11, 2016

Hi Maria,

Thanks. Yes, please forward the comment. I realize that is the standard Apple security notification. The point is that it's the same message whether it's a genuine Adobe product or whether it's not. The only way to know the difference between two apparently similar installers in your downloads folder is to have a checksum. With all of the issues regarding Plug-ins and security these days it's really a requirement and not optional.

Thank you.

_maria_
_maria_Correct answer
Legend
November 12, 2016

Flash Player installers are digitally signed.  You can check to see if they are signed by Adobe:

  1. Launch Terminal (/Applications/Utilities/Termina.app)
  2. At the prompt Type: codesign -vvd <path to Flash Player.app> [ENTER]
    • for example: codesign -vvd /Volumes/Adobe\ Flash\ Player\ Installer/Install\ Adobe\ Flash\ Player.app
  3. The result should have the following in the output:

    Authority=Developer ID Application: Adobe Systems, Inc.

    Authority=Developer ID Certification Authority

    Authority=Apple Root CA