# 404 when trying to download sha1 for Keycloka 26.7.0

**URL:** <https://forum.keycloak.org/t/404-when-trying-to-download-sha1-for-keycloka-26-7-0/31640>\
**Category:** Miscellanaeous\
**Created:** [July 21, 2026, 8:00am UTC](https://forum.keycloak.org/t/404-when-trying-to-download-sha1-for-keycloka-26-7-0/31640 "2026-07-21T08:00:55Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mthethwa](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/mthethwa/32/9420_2.png) [@mthethwa](https://forum.keycloak.org/u/mthethwa)\
**Post date:** [July 21, 2026, 8:00am UTC](https://forum.keycloak.org/t/404-when-trying-to-download-sha1-for-keycloka-26-7-0/31640/1 "2026-07-21T08:00:55Z")

</div>

I could not download sha1 from here: [https://github.com/keycloak/keycloak/releases/download/26.7.0/keycloak-26.7.0.tar.gz.sha1](https://github.com/keycloak/keycloak/releases/download/26.7.0/keycloak-26.7.0.tar.gz.sha1)

---

<div class="post-metadata">

**Author:** ![jbickel](https://avatars.discourse-cdn.com/v4/letter/j/8491ac/32.png) [@jbickel](https://forum.keycloak.org/u/jbickel)\
**Post date:** [July 23, 2026, 2:29pm UTC](https://forum.keycloak.org/t/404-when-trying-to-download-sha1-for-keycloka-26-7-0/31640/2 "2026-07-23T14:29:52Z")

</div>

You’re better off downloading [https://github.com/keycloak/keycloak/releases/download/26.7.0/keycloak-26.7.0.tar.gz.asc](https://github.com/keycloak/keycloak/releases/download/26.7.0/keycloak-26.7.0.tar.gz.asc) and verifying the signature matches the expected key found at [Keycloak Signing Keys - Keycloak](https://www.keycloak.org/keys) . I see your point, though, that the Downloads page references the sha1 instead of the signature file. 🤷