tarball: fix message wording (checksum may not necessarily be MD5-based)