Use sha1 updateinfo checksumming on EL5

https://bugzilla.redhat.com/show_bug.cgi?id=1080373
pull #35