This patch attempts to resolve the hash type used in .metadata and then perform verification using the correct tool.
I attempted to submit a similar patchset last week (17th) but it seems to have never made it onto the list.
Tyler Parsons (2): Verify that each file hash listed in .metadata matches the hash of the downloaded file. Fixing URL
get_sources.sh | 47 +++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 45 insertions(+), 2 deletions(-)