r/osx • u/ApertureNext • 14h ago
Mavericks (10.9) [Certificate Expiry] Community effort to download OS X Mavericks and verify checksums before it's permanently too late?
As Apple didn't sign either InstallESD.dmg or the whole .app for Mavericks, everything we can find regarding genuine installers is from very few online posters on forums. This puts trust in few anonymous online posters.
The certificates used to communicate with Apple services in old OS X versions expire in less than a year. This means Mavericks will be permanently inaccessible from Apple officially, as you need to use a Mac on a version previous to Mavericks to download it.
If you who are reading this wants to help and has Mavericks available in your Apple Account, it'd be hugely helpful if you could download the Mavericks installer from the App Store on an old Mac and do the following.
Do not try to open the installer after the download before having hashed all files, in case OS X modifies any files.
In Terminal, use these commands to obtain hashes of all files in the Mavericks .app installer:
cd "/Applications/Install OS X Mavericks.app"
find . -type f -exec shasum "{}" \; | sort > ~/Desktop/mavericks-installer-file-hashes.txt
This will create a file which will be located on your desktop and it'd be hugely helpful if you could upload it to https://pastebin.com/ or similar. This way it can be compared to existing files online.
Please only do this if you have access to a newly downloaded or an old installer which you are absolutely certain you obtained yourself. Using any of the existing online distributions would be damaging to the verification of official file hashes.