Fix: don't check against nonexistent md5sum or sha256sum