support for checking sha1sum match for remote tarball vs downloaded tarball