use php sha1 since openssl sha1 givs odd results