fix tarball sha1