doc update: add note about openssl sha1 to calculate checksum