Use sha256 instead of md5 for download verification. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>