Checks on Zabbix CDN for Windows Downloads

[Wimpie]

Hi everyone, new to the forums. Zabbix user/tech for a couple of years now.

I am trying to automate Zabbix Agent 2 downloading and patching in a Windows environment.
For this I am trying to have a downloader script download the latest available MSI for Zabbix Agent 2 (with in LTS branch), but of course I'd like to do this safely.
I noticed the checksums are available on the Zabbix website, but I cannot find them on the CDN.

Would it be possible that they are checkable in files on the CDN as well? Or would that defeat the purpose?

[cyber]

I have no power to make it happen, but I cannot see, why it should not be possible... They do provide checksums for source packages... https://cdn.zabbix.com/zabbix/sources/stable/7.2/

[Wimpie]

I have no power to make it happen, but I cannot see, why it should not be possible... They do provide checksums for source packages... https://cdn.zabbix.com/zabbix/sources/stable/7.2/

Yes, exactly. That's why I was surprised to see that they weren't available in the Zabbix Agent (2) binaries folders.
I was trying to have a script find the sha256 checksum on the download page itself, but I was struggling with that and I think that's a 'dirty' check that's also prone to breaking.

[andrewweston]

I ran into a similar challenge while building a small downloader tool for another platform. One thing I learned was that relying only on the latest file URL isn't enough you should always verify the integrity of the downloaded file before using it. If the CDN doesn't expose checksum files, pulling the official checksums from the vendor's release page or API (if available) and validating them locally is probably the safest approach. It adds a bit of complexity, but it's worth it for automated deployments. here is that project

https://ytthumbnails.org/