use correct way to get sources
update md5sums