* verify md5 hashes before using files for gbuild