Details
Description
create-release script creates md5 checksum files, but now md5 checksum is useless.
https://www.apache.org/dev/release-distribution.html#sigs-and-sums
For new releases, PMCs MUST supply SHA-256 and/or SHA-512; and SHOULD NOT supply MD5 or SHA-1. Existing releases do not need to be changed.