use md5sum instead of shasum for better compatibility