use sha checksum for centos 5 repo