Use a `sha1`; `md5` hasn't been supported in a long time.