Merge "Use sha256sum instead of gpg for verification"