SHA256-related fixes
Hello,
I noticed several problems when trying to import deb packages from Debian security repositories. They use SHA256-only Package index files, and don't provide MD5 hashes.
The second commit (change to src/cacheman.cc) is a bit ad-hoc. It could be improved if we need to deal with SHA1-only or SHA512-only indexes, although I have not encountered them yet.