[Bug 8839] never use md5 and/or sha1, use sha512, file signing