diff --git a/docs/environment_variables.adoc b/docs/environment_variables.adoc
deleted file mode 100644
index 6186d98..0000000
--- a/docs/environment_variables.adoc
+++ /dev/null
@@ -1,32 +0,0 @@
-# Environment variables
-
-In Dogen you can use a few environment variables that can infulence how Dogen behaves.
-
-## `DOGEN_SOURCES_CACHE`
-
-Default value: not set
-
-Specifies a different location that could be used to fetch artifacts. Usually this is a
-URL to some cache service. You can use following substitutions:
-
-* `\#filename#` -- the file name from the `url` of the artifact
-* `\#algorithm#` -- has algorithm specified for the selected artifact
-* `\#hash#` -- value of the digest.
-
-### Example
-
-Consider this sources section:
-
-```
-sources:
-    - url: http://some.host.com/7.0.0/jboss-eap-7.0.0.zip
-      md5: cd02482daa0398bf5500e1628d28179a
-```
-
-When you set `DOGEN_SOURCES_CACHE` to `http://cache.host.com/fetch?\#algorithm#=\#hash#` then
-the JBoss EAP artifact will be fetched from: `http://cache.host.com/fetch?md5=cd02482daa0398bf5500e1628d28179a`.
-
-If `DOGEN_SOURCES_CACHE` would be set to `http://cache.host.com/cache/\#filename#` then
-the JBoss EAP artifact will be fetched from: `http://cache.host.com/cache/jboss-eap-7.0.0.zip`.
-
-In all cases digest will be computed from the downloaded file and compared with the expected value.
diff --git a/docs/index.adoc b/docs/index.adoc
index 6d9617d..70a0f13 100644
--- a/docs/index.adoc
+++ b/docs/index.adoc
@@ -6,6 +6,5 @@ This document covers usage instructions and examples.
 
 * link:descriptor.adoc[Descriptor file explained]
 * link:conventions.adoc[Conventions]
-* link:environment_variables.adoc[Environment variables]
 
 
diff --git a/dogen/generator.py b/dogen/generator.py
index 98ec763..0b5d94a 100644
--- a/dogen/generator.py
+++ b/dogen/generator.py
@@ -16,6 +16,8 @@ from dogen.tools import Tools
 from dogen import version, DEFAULT_SCRIPT_EXEC, DEFAULT_SCRIPT_USER
 from dogen.errors import Error
 
+SUPPORTED_HASH_ALGORITHMS = ['sha256', 'sha1', 'md5']
+
 class Generator(object):
     def __init__(self, log, args, plugins=[]):
         self.log = log
@@ -289,11 +291,29 @@ class Generator(object):
                 target = basename
 
             filename = ("%s/%s" % (self.output, target))
+
             passed = False
+            algorithms = []
+
+            md5sum = source.get('md5sum')
+
+            if md5sum:
+                self.log.warn("The 'md5sum' key is deprecated, please use 'md5' for %s. Or better switch to sha256 or sha1." % url)
+
+                # Backwards compatibility for md5sum
+                if not source.get('md5'):
+                    source['md5'] = md5sum
+
+            for supported_algorithm in SUPPORTED_HASH_ALGORITHMS:
+                if not source.get(supported_algorithm):
+                    continue
+
+                algorithms.append(supported_algorithm)
+
             try:
-                if os.path.exists(filename):
-                    if source.get('md5sum'):
-                        self.check_sum(filename, source['md5sum'])
+                if os.path.exists(filename) and algorithms:
+                    for algorithm in algorithms:
+                        self.check_sum(filename, source[algorithm], algorithm)
                     passed = True
             except Exception as e:
                 self.log.warn(str(e))
@@ -303,20 +323,36 @@ class Generator(object):
                 sources_cache = os.environ.get("DOGEN_SOURCES_CACHE")
 
                 if sources_cache:
-                    url = sources_cache.replace('#hash#', source['md5sum']).replace('#algorithm#', 'md5')
+                    url = sources_cache.replace('#filename#', basename)
+
+                    if algorithms:
+                        if len(algorithms) > 1:
+                            self.log.warn("You specified multiple algorithms for '%s' url, but only '%s' will be used to fetch it from cache" % (url, algorithms[0]))
+
+                        url = url.replace('#hash#', source[algorithms[0]]).replace('#algorithm#', algorithms[0])
+
                     self.log.info("Using '%s' as cached location for artifact" % url)
 
                 self._fetch_file(url, filename)
 
-                if source.get('md5sum'):
-                    self.check_sum(filename, source['md5sum'])
-                    self.cfg['artifacts'][target] = "md5:%s" % source['md5sum']
+                if algorithms:
+                    for algorithm in algorithms:
+                        self.check_sum(filename, source[algorithm], algorithm)
+                    self.cfg['artifacts'][target] = "%s:%s" % (algorithms[0], source[algorithms[0]])
                 else:
                     self.cfg['artifacts'][target] = None
 
-    def check_sum(self, filename, checksum):
-        self.log.info("Checking '%s' MD5 hash..." % os.path.basename(filename))
-        filesum = hashlib.md5(open(filename, 'rb').read()).hexdigest()
+    def check_sum(self, filename, checksum, algorithm):
+        self.log.info("Checking '%s' %s hash..." % (os.path.basename(filename), algorithm))
+
+        hash = getattr(hashlib, algorithm)()
+
+        with open(filename, "rb") as f:
+            for chunk in iter(lambda: f.read(65536), b""):
+                hash.update(chunk)
+        filesum = hash.hexdigest()
+
         if filesum.lower() != checksum.lower():
-            raise Exception("The md5sum computed for the '%s' file ('%s') doesn't match the '%s' value" % (filename, filesum, checksum))
+            raise Exception("The %s computed for the '%s' file ('%s') doesn't match the '%s' value" % (algorithm, filename, filesum, checksum))
+
         self.log.debug("MD5 hash is correct.")
diff --git a/dogen/schema/kwalify_schema.yaml b/dogen/schema/kwalify_schema.yaml
index 040cd19..8f053f7 100644
--- a/dogen/schema/kwalify_schema.yaml
+++ b/dogen/schema/kwalify_schema.yaml
@@ -67,6 +67,9 @@ map:
       - map:
           url: {type: str}
           md5sum: {type: str}
+          md5: {type: str}
+          sha1: {type: str}
+          sha256: {type: str}
           target: {type: str}
   packages:
     seq:

Add support for multiple hash algorithms in artifacts
Currently we support only md5, but we should also support sha1 and sha256.
diff --git a/tests/schemas/good/openshift_amq_6.2_image.yaml b/tests/schemas/good/openshift_amq_6.2_image.yaml
index b7aff9b..fa4f3cf 100644
--- a/tests/schemas/good/openshift_amq_6.2_image.yaml
+++ b/tests/schemas/good/openshift_amq_6.2_image.yaml
@@ -52,9 +52,9 @@ scripts:
       exec: install.sh
 sources:
     - url: http://redacted/jolokia-jvm-1.3.2.redhat-1-agent.jar
-      md5sum: 1b996b9083f537917b307309b0e2f16d
+      md5: 1b996b9083f537917b307309b0e2f16d
     - url: http://redacted/openshift-activemq-plugin-1.0.0.Final-redhat-1.jar
-      md5sum: 325fbbaff0f7dbea42203346d9c3bf98
+      md5: 325fbbaff0f7dbea42203346d9c3bf98
     - url: http://redacted/jboss-dmr-1.2.2.Final-redhat-1.jar
-      md5sum: 8df4cbf6f39c3bce21de16ad708084d5
+      md5: 8df4cbf6f39c3bce21de16ad708084d5
 
diff --git a/tests/schemas/good/openshift_datagrid_6.5_image.yaml b/tests/schemas/good/openshift_datagrid_6.5_image.yaml
index 22ce48a..b20b77e 100644
--- a/tests/schemas/good/openshift_datagrid_6.5_image.yaml
+++ b/tests/schemas/good/openshift_datagrid_6.5_image.yaml
@@ -151,16 +151,16 @@ scripts:
       user: 185
 sources:
     - url: http://redacted/jolokia-jvm-1.3.2.redhat-1-agent.jar
-      md5sum: 1b996b9083f537917b307309b0e2f16d
+      md5: 1b996b9083f537917b307309b0e2f16d
     - url: http://redacted/javax.json-1.0.4.jar
-      md5sum: 569870f975deeeb6691fcb9bc02a9555
+      md5: 569870f975deeeb6691fcb9bc02a9555
     - url: http://redacted/jboss-logmanager-ext-1.0.0.Alpha2-redhat-1.jar
-      md5sum: 7c743e35463db5f55f415dd666d705c5
+      md5: 7c743e35463db5f55f415dd666d705c5
     - url: http://redacted/openshift-ping-common-1.0.0.Final-redhat-1.jar
-      md5sum: bafa4db7efe4082d76cde2fa9499bf84
+      md5: bafa4db7efe4082d76cde2fa9499bf84
     - url: http://redacted/openshift-ping-dns-1.0.0.Final-redhat-1.jar
-      md5sum: 71bbfdf795a2c65e4473df242f765490
+      md5: 71bbfdf795a2c65e4473df242f765490
     - url: http://redacted/openshift-ping-kube-1.0.0.Final-redhat-1.jar
-      md5sum: 145add030a89c3ed588dce27b0f24999
+      md5: 145add030a89c3ed588dce27b0f24999
     - url: http://redacted/oauth-20100527.jar
-      md5sum: 91c7c70579f95b7ddee95b2143a49b41
+      md5: 91c7c70579f95b7ddee95b2143a49b41
diff --git a/tests/schemas/good/openshift_eap_6.4_image.yaml b/tests/schemas/good/openshift_eap_6.4_image.yaml
index 083329d..2b24f39 100644
--- a/tests/schemas/good/openshift_eap_6.4_image.yaml
+++ b/tests/schemas/good/openshift_eap_6.4_image.yaml
@@ -98,22 +98,22 @@ scripts:
       user: 185
 sources:
     - url: http://redacted/jolokia-jvm-1.3.2.redhat-1-agent.jar
-      md5sum: 1b996b9083f537917b307309b0e2f16d
+      md5: 1b996b9083f537917b307309b0e2f16d
     - url: http://redacted/javax.json-1.0.4.jar
-      md5sum: 569870f975deeeb6691fcb9bc02a9555
+      md5: 569870f975deeeb6691fcb9bc02a9555
     - url: http://redacted/jboss-logmanager-ext-1.0.0.Alpha2-redhat-1.jar
-      md5sum: 7c743e35463db5f55f415dd666d705c5
+      md5: 7c743e35463db5f55f415dd666d705c5
     - url: http://redacted/openshift-ping-common-1.0.0.Final-redhat-1.jar
-      md5sum: bafa4db7efe4082d76cde2fa9499bf84
+      md5: bafa4db7efe4082d76cde2fa9499bf84
     - url: http://redacted/openshift-ping-dns-1.0.0.Final-redhat-1.jar
-      md5sum: 71bbfdf795a2c65e4473df242f765490
+      md5: 71bbfdf795a2c65e4473df242f765490
     - url: http://redacted/openshift-ping-kube-1.0.0.Final-redhat-1.jar
-      md5sum: 145add030a89c3ed588dce27b0f24999
+      md5: 145add030a89c3ed588dce27b0f24999
     - url: http://redacted/oauth-20100527.jar
-      md5sum: 91c7c70579f95b7ddee95b2143a49b41
+      md5: 91c7c70579f95b7ddee95b2143a49b41
     - url: http://redacted/activemq-rar-5.11.0.redhat-621084.rar
-      md5sum: 207e17ac8102c93233fe2764d1fe8499
+      md5: 207e17ac8102c93233fe2764d1fe8499
     - url: http://redacted/rh-sso-7.0.0-eap6-adapter.zip
-      md5sum: 6fd81306ea4297307dcc5f51712e5f95
+      md5: 6fd81306ea4297307dcc5f51712e5f95
     - url: http://redacted/rh-sso-7.0.0-saml-eap6-adapter.zip
-      md5sum: 3b953c114dd09f86e71e18cd57d8af56
+      md5: 3b953c114dd09f86e71e18cd57d8af56
diff --git a/tests/schemas/good/openshift_eap_7.0_image.yaml b/tests/schemas/good/openshift_eap_7.0_image.yaml
index 72df73d..08f5a5c 100644
--- a/tests/schemas/good/openshift_eap_7.0_image.yaml
+++ b/tests/schemas/good/openshift_eap_7.0_image.yaml
@@ -107,22 +107,22 @@ scripts:
       user: 185
 sources:
     - url: http://redacted/jolokia-jvm-1.3.2.redhat-1-agent.jar
-      md5sum: 1b996b9083f537917b307309b0e2f16d
+      md5: 1b996b9083f537917b307309b0e2f16d
     - url: http://redacted/javax.json-1.0.4.jar
-      md5sum: 569870f975deeeb6691fcb9bc02a9555
+      md5: 569870f975deeeb6691fcb9bc02a9555
     - url: http://redacted/jboss-logmanager-ext-1.0.0.Alpha2-redhat-1.jar
-      md5sum: 7c743e35463db5f55f415dd666d705c5
+      md5: 7c743e35463db5f55f415dd666d705c5
     - url: http://redacted/openshift-ping-common-1.0.0.Final-redhat-1.jar
-      md5sum: bafa4db7efe4082d76cde2fa9499bf84
+      md5: bafa4db7efe4082d76cde2fa9499bf84
     - url: http://redacted/openshift-ping-dns-1.0.0.Final-redhat-1.jar
-      md5sum: 71bbfdf795a2c65e4473df242f765490
+      md5: 71bbfdf795a2c65e4473df242f765490
     - url: http://redacted/openshift-ping-kube-1.0.0.Final-redhat-1.jar
-      md5sum: 145add030a89c3ed588dce27b0f24999
+      md5: 145add030a89c3ed588dce27b0f24999
     - url: http://redacted/oauth-20100527.jar
-      md5sum: 91c7c70579f95b7ddee95b2143a49b41
+      md5: 91c7c70579f95b7ddee95b2143a49b41
     - url: http://redacted/activemq-rar-5.11.0.redhat-621084.rar
-      md5sum: 207e17ac8102c93233fe2764d1fe8499
+      md5: 207e17ac8102c93233fe2764d1fe8499
     - url: http://redacted/rh-sso-7.0.0-eap7-adapter.zip
-      md5sum: 1542c1014d9ebc24522839a5fa8bee4d
+      md5: 1542c1014d9ebc24522839a5fa8bee4d
     - url: http://redacted/rh-sso-7.0.0-saml-eap7-adapter.zip
-      md5sum: ce858a47c707b362a968ffd5c66768dd
+      md5: ce858a47c707b362a968ffd5c66768dd
diff --git a/tests/schemas/good/openshift_fuse-camel_6.3_image.yaml b/tests/schemas/good/openshift_fuse-camel_6.3_image.yaml
index abc1746..953fa45 100644
--- a/tests/schemas/good/openshift_fuse-camel_6.3_image.yaml
+++ b/tests/schemas/good/openshift_fuse-camel_6.3_image.yaml
@@ -101,22 +101,22 @@ scripts:
       exec: configure.sh
 sources:
     - url: http://redacted/jolokia-jvm-1.3.2.redhat-1-agent.jar
-      md5sum: 1b996b9083f537917b307309b0e2f16d
+      md5: 1b996b9083f537917b307309b0e2f16d
     - url: http://redacted/javax.json-1.0.4.jar
-      md5sum: 569870f975deeeb6691fcb9bc02a9555
+      md5: 569870f975deeeb6691fcb9bc02a9555
     - url: http://redacted/jboss-logmanager-ext-1.0.0.Alpha2-redhat-1.jar
-      md5sum: 7c743e35463db5f55f415dd666d705c5
+      md5: 7c743e35463db5f55f415dd666d705c5
     - url: http://redacted/openshift-ping-common-1.0.0.Final-redhat-1.jar
-      md5sum: bafa4db7efe4082d76cde2fa9499bf84
+      md5: bafa4db7efe4082d76cde2fa9499bf84
     - url: http://redacted/openshift-ping-dns-1.0.0.Final-redhat-1.jar
-      md5sum: 71bbfdf795a2c65e4473df242f765490
+      md5: 71bbfdf795a2c65e4473df242f765490
     - url: http://redacted/openshift-ping-kube-1.0.0.Final-redhat-1.jar
-      md5sum: 145add030a89c3ed588dce27b0f24999
+      md5: 145add030a89c3ed588dce27b0f24999
     - url: http://redacted/oauth-20100527.jar
-      md5sum: 91c7c70579f95b7ddee95b2143a49b41
+      md5: 91c7c70579f95b7ddee95b2143a49b41
     - url: http://redacted/activemq-rar-5.11.0.redhat-621084.rar
-      md5sum: 207e17ac8102c93233fe2764d1fe8499
+      md5: 207e17ac8102c93233fe2764d1fe8499
     - url: http://redacted/rh-sso-7.0.0-eap6-adapter.zip
-      md5sum: 6fd81306ea4297307dcc5f51712e5f95
+      md5: 6fd81306ea4297307dcc5f51712e5f95
     - url: http://redacted/rh-sso-7.0.0-saml-eap6-adapter.zip
-      md5sum: 3b953c114dd09f86e71e18cd57d8af56
+      md5: 3b953c114dd09f86e71e18cd57d8af56
diff --git a/tests/schemas/good/openshift_kieserver_6.2_image.yaml b/tests/schemas/good/openshift_kieserver_6.2_image.yaml
index 5611e2c..3a1bd93 100644
--- a/tests/schemas/good/openshift_kieserver_6.2_image.yaml
+++ b/tests/schemas/good/openshift_kieserver_6.2_image.yaml
@@ -130,11 +130,11 @@ scripts:
       exec: configure.sh
 sources:
     - url: http://redacted/jboss-bpmsuite-6.2.1.GA-redhat-2-deployable-eap6.x.zip
-      md5sum: b63c7dfe82a44a140cce3a824c8c2e90
+      md5: b63c7dfe82a44a140cce3a824c8c2e90
     - url: http://redacted/openshift-kieserver-common-1.0.2.Final-redhat-1.jar
-      md5sum: 5858103206d0bcc4695aad38a7430c75
+      md5: 5858103206d0bcc4695aad38a7430c75
     - url: http://redacted/openshift-kieserver-jms-1.0.2.Final-redhat-1.jar
-      md5sum: 4a80b12399c49a1d274bbd1c62b49b65
+      md5: 4a80b12399c49a1d274bbd1c62b49b65
     - url: http://redacted/openshift-kieserver-web-1.0.2.Final-redhat-1.jar
-      md5sum: adf602d027020b30cc5743d3d5d8e2f7
+      md5: adf602d027020b30cc5743d3d5d8e2f7
 
diff --git a/tests/schemas/good/openshift_kieserver_6.3_image.yaml b/tests/schemas/good/openshift_kieserver_6.3_image.yaml
index 607ad96..caf4912 100644
--- a/tests/schemas/good/openshift_kieserver_6.3_image.yaml
+++ b/tests/schemas/good/openshift_kieserver_6.3_image.yaml
@@ -131,12 +131,12 @@ scripts:
       exec: configure.sh
 sources:
     - url: http://redacted/jboss-bpmsuite-6.3.0.GA-deployable-eap6.x.zip
-      md5sum: 4e283717b0f295adf7025971065d6db8
+      md5: 4e283717b0f295adf7025971065d6db8
     - url: http://redacted/jboss-bpmsuite-6.3.0.GA-supplementary-tools.zip
-      md5sum: b3d135e2d297f1e89d9ff8357c1e9aac
+      md5: b3d135e2d297f1e89d9ff8357c1e9aac
     - url: http://redacted/openshift-kieserver-common-1.0.2.Final-redhat-1.jar
-      md5sum: 5858103206d0bcc4695aad38a7430c75
+      md5: 5858103206d0bcc4695aad38a7430c75
     - url: http://redacted/openshift-kieserver-jms-1.0.2.Final-redhat-1.jar
-      md5sum: 4a80b12399c49a1d274bbd1c62b49b65
+      md5: 4a80b12399c49a1d274bbd1c62b49b65
     - url: http://redacted/openshift-kieserver-web-1.0.2.Final-redhat-1.jar
-      md5sum: adf602d027020b30cc5743d3d5d8e2f7
+      md5: adf602d027020b30cc5743d3d5d8e2f7
diff --git a/tests/schemas/good/openshift_sso_7.0_image.yaml b/tests/schemas/good/openshift_sso_7.0_image.yaml
index 9487fa4..76cee4f 100644
--- a/tests/schemas/good/openshift_sso_7.0_image.yaml
+++ b/tests/schemas/good/openshift_sso_7.0_image.yaml
@@ -97,17 +97,17 @@ scripts:
       exec: configure.sh
 sources:
     - url: http://redacted/jolokia-jvm-1.3.2.redhat-1-agent.jar
-      md5sum: 1b996b9083f537917b307309b0e2f16d
+      md5: 1b996b9083f537917b307309b0e2f16d
     - url: http://redacted/javax.json-1.0.4.jar
-      md5sum: 569870f975deeeb6691fcb9bc02a9555
+      md5: 569870f975deeeb6691fcb9bc02a9555
     - url: http://redacted/jboss-logmanager-ext-1.0.0.Alpha2-redhat-1.jar
-      md5sum: 7c743e35463db5f55f415dd666d705c5
+      md5: 7c743e35463db5f55f415dd666d705c5
     - url: http://redacted/openshift-ping-common-1.0.0.Final-redhat-1.jar
-      md5sum: bafa4db7efe4082d76cde2fa9499bf84
+      md5: bafa4db7efe4082d76cde2fa9499bf84
     - url: http://redacted/openshift-ping-dns-1.0.0.Final-redhat-1.jar
-      md5sum: 71bbfdf795a2c65e4473df242f765490
+      md5: 71bbfdf795a2c65e4473df242f765490
     - url: http://redacted/openshift-ping-kube-1.0.0.Final-redhat-1.jar
-      md5sum: 145add030a89c3ed588dce27b0f24999
+      md5: 145add030a89c3ed588dce27b0f24999
     - url: http://redacted/oauth-20100527.jar
-      md5sum: 91c7c70579f95b7ddee95b2143a49b41
+      md5: 91c7c70579f95b7ddee95b2143a49b41
 
diff --git a/tests/schemas/good/openshift_webserver-tomcat7_3.0_image.yaml b/tests/schemas/good/openshift_webserver-tomcat7_3.0_image.yaml
index bc8c921..4c4d54e 100644
--- a/tests/schemas/good/openshift_webserver-tomcat7_3.0_image.yaml
+++ b/tests/schemas/good/openshift_webserver-tomcat7_3.0_image.yaml
@@ -94,10 +94,10 @@ scripts:
       exec: configure.sh
 sources:
     - url: http://redacted/jolokia-jvm-1.3.2.redhat-1-agent.jar
-      md5sum: 1b996b9083f537917b307309b0e2f16d
+      md5: 1b996b9083f537917b307309b0e2f16d
     - url: http://redacted/json-smart-1.1.1.jar
-      md5sum: c382c9109020d001b96329c2057ba933
+      md5: c382c9109020d001b96329c2057ba933
     - url: http://redacted/commons-lang-2.6.0.redhat-4.jar
-      md5sum: 0da0fbfb0ff2160df3a4832d28003361
+      md5: 0da0fbfb0ff2160df3a4832d28003361
     - url: http://redacted/jsonevent-layout-1.7-redhat-1.jar
-      md5sum: 08f9aa037ac91c4aaa0d5dabf143a60e
+      md5: 08f9aa037ac91c4aaa0d5dabf143a60e
diff --git a/tests/schemas/good/openshift_webserver-tomcat8_3.0_image.yaml b/tests/schemas/good/openshift_webserver-tomcat8_3.0_image.yaml
index 11afdfb..6a0b095 100644
--- a/tests/schemas/good/openshift_webserver-tomcat8_3.0_image.yaml
+++ b/tests/schemas/good/openshift_webserver-tomcat8_3.0_image.yaml
@@ -94,10 +94,10 @@ scripts:
       exec: configure.sh
 sources:
     - url: http://redacted/jolokia-jvm-1.3.2.redhat-1-agent.jar
-      md5sum: 1b996b9083f537917b307309b0e2f16d
+      md5: 1b996b9083f537917b307309b0e2f16d
     - url: http://redacted/json-smart-1.1.1.jar
-      md5sum: c382c9109020d001b96329c2057ba933
+      md5: c382c9109020d001b96329c2057ba933
     - url: http://redacted/commons-lang-2.6.0.redhat-4.jar
-      md5sum: 0da0fbfb0ff2160df3a4832d28003361
+      md5: 0da0fbfb0ff2160df3a4832d28003361
     - url: http://redacted/jsonevent-layout-1.7-redhat-1.jar
-      md5sum: 08f9aa037ac91c4aaa0d5dabf143a60e
+      md5: 08f9aa037ac91c4aaa0d5dabf143a60e
diff --git a/tests/test_unit_generate_configuration.py b/tests/test_unit_generate_configuration.py
index e439971..4572a7d 100644
--- a/tests/test_unit_generate_configuration.py
+++ b/tests/test_unit_generate_configuration.py
@@ -275,6 +275,50 @@ class TestConfig(unittest.TestCase):
     @mock.patch('dogen.generator.Generator.check_sum')
     @mock.patch('dogen.generator.Generator._fetch_file')
     def test_handling_sources(self, mock_fetch_file, mock_check_sum):
+        with self.descriptor as f:
+            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5: e9013fc202c87be48e3b302df10efc4b".encode())
+
+        generator = Generator(self.log, self.args)
+        generator.configure()
+        generator.handle_sources()
+
+        mock_fetch_file.assert_called_with('http://somehost.com/file.zip', 'target/file.zip')
+        mock_check_sum.assert_called_with('target/file.zip', 'e9013fc202c87be48e3b302df10efc4b', 'md5')
+
+    @mock.patch('dogen.generator.Generator.check_sum')
+    @mock.patch('dogen.generator.Generator._fetch_file')
+    def test_handling_sources_with_multiple_hashes(self, mock_fetch_file, mock_check_sum):
+        with self.descriptor as f:
+            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5: e9013fc202c87be48e3b302df10efc4b\n    sha1: 105bfe02a86ba69be5506cd559a54c4b252fb132".encode())
+
+        generator = Generator(self.log, self.args)
+        generator.configure()
+        generator.handle_sources()
+
+        mock_fetch_file.assert_called_with('http://somehost.com/file.zip', 'target/file.zip')
+        calls = [mock.call('target/file.zip', '105bfe02a86ba69be5506cd559a54c4b252fb132', 'sha1'), mock.call('target/file.zip', 'e9013fc202c87be48e3b302df10efc4b', 'md5')]
+        mock_check_sum.assert_has_calls(calls)
+
+    @mock.patch('dogen.generator.Generator.check_sum')
+    @mock.patch('dogen.generator.Generator._fetch_file')
+    def test_handling_sources_with_multiple_hashes_and_cache_url(self, mock_fetch_file, mock_check_sum):
+        with self.descriptor as f:
+            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5: e9013fc202c87be48e3b302df10efc4b\n    sha1: 105bfe02a86ba69be5506cd559a54c4b252fb132".encode())
+
+        k = mock.patch.dict(os.environ, {'DOGEN_SOURCES_CACHE':'http://cache/get?#algorithm#=#hash#'})
+        k.start()
+        generator = Generator(self.log, self.args)
+        generator.configure()
+        generator.handle_sources()
+        k.stop()
+
+        mock_fetch_file.assert_called_with('http://cache/get?sha1=105bfe02a86ba69be5506cd559a54c4b252fb132', 'target/file.zip')
+        calls = [mock.call('target/file.zip', '105bfe02a86ba69be5506cd559a54c4b252fb132', 'sha1'), mock.call('target/file.zip', 'e9013fc202c87be48e3b302df10efc4b', 'md5')]
+        mock_check_sum.assert_has_calls(calls)
+
+    @mock.patch('dogen.generator.Generator.check_sum')
+    @mock.patch('dogen.generator.Generator._fetch_file')
+    def test_handling_sources_with_deprecated_md5sum(self, mock_fetch_file, mock_check_sum):
         with self.descriptor as f:
             f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5sum: e9013fc202c87be48e3b302df10efc4b".encode())
 
@@ -283,13 +327,40 @@ class TestConfig(unittest.TestCase):
         generator.handle_sources()
 
         mock_fetch_file.assert_called_with('http://somehost.com/file.zip', 'target/file.zip')
+        mock_check_sum.assert_called_with('target/file.zip', 'e9013fc202c87be48e3b302df10efc4b', 'md5')
+
+    @mock.patch('dogen.generator.Generator.check_sum')
+    @mock.patch('dogen.generator.Generator._fetch_file')
+    def test_handling_sources_with_sha1(self, mock_fetch_file, mock_check_sum):
+        with self.descriptor as f:
+            f.write("sources:\n  - url: http://somehost.com/file.zip\n    sha1: 105bfe02a86ba69be5506cd559a54c4b252fb132".encode())
+
+        generator = Generator(self.log, self.args)
+        generator.configure()
+        generator.handle_sources()
+
+        mock_fetch_file.assert_called_with('http://somehost.com/file.zip', 'target/file.zip')
+        mock_check_sum.assert_called_with('target/file.zip', '105bfe02a86ba69be5506cd559a54c4b252fb132', 'sha1')
+
+    @mock.patch('dogen.generator.Generator.check_sum')
+    @mock.patch('dogen.generator.Generator._fetch_file')
+    def test_handling_sources_with_sha256(self, mock_fetch_file, mock_check_sum):
+        with self.descriptor as f:
+            f.write("sources:\n  - url: http://somehost.com/file.zip\n    sha256: 9912afca5a08e9e05174c5fbb7a9a1510283d5952f90796c6a3e8bc78217e2fb".encode())
+
+        generator = Generator(self.log, self.args)
+        generator.configure()
+        generator.handle_sources()
+
+        mock_fetch_file.assert_called_with('http://somehost.com/file.zip', 'target/file.zip')
+        mock_check_sum.assert_called_with('target/file.zip', '9912afca5a08e9e05174c5fbb7a9a1510283d5952f90796c6a3e8bc78217e2fb', 'sha256')
 
     @mock.patch('dogen.generator.os.path.exists', return_value=True)
     @mock.patch('dogen.generator.Generator.check_sum')
     @mock.patch('dogen.generator.Generator._fetch_file')
     def test_handling_sources_when_local_file_exists_and_is_correct(self, mock_fetch_file, mock_check_sum, mock_path):
         with self.descriptor as f:
-            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5sum: e9013fc202c87be48e3b302df10efc4b".encode())
+            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5: e9013fc202c87be48e3b302df10efc4b".encode())
 
         generator = Generator(self.log, self.args)
         generator.configure()
@@ -302,7 +373,7 @@ class TestConfig(unittest.TestCase):
     @mock.patch('dogen.generator.Generator._fetch_file')
     def test_handling_sources_when_local_file_exists_and_is_broken(self, mock_fetch_file, mock_check_sum, mock_path):
         with self.descriptor as f:
-            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5sum: e9013fc202c87be48e3b302df10efc4b".encode())
+            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5: e9013fc202c87be48e3b302df10efc4b".encode())
 
         generator = Generator(self.log, self.args)
         generator.configure()
@@ -314,7 +385,7 @@ class TestConfig(unittest.TestCase):
     @mock.patch('dogen.generator.Generator._fetch_file')
     def test_handling_sources_with_target_filename(self, mock_fetch_file, mock_check_sum):
         with self.descriptor as f:
-            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5sum: e9013fc202c87be48e3b302df10efc4b\n    target: target.zip".encode())
+            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5: e9013fc202c87be48e3b302df10efc4b\n    target: target.zip".encode())
 
         generator = Generator(self.log, self.args)
         generator.configure()
@@ -326,7 +397,7 @@ class TestConfig(unittest.TestCase):
     @mock.patch('dogen.generator.Generator._fetch_file')
     def test_handling_sources_with_cache_url(self, mock_fetch_file, mock_check_sum):
         with self.descriptor as f:
-            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5sum: e9013fc202c87be48e3b302df10efc4b".encode())
+            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5: e9013fc202c87be48e3b302df10efc4b".encode())
 
         k = mock.patch.dict(os.environ, {'DOGEN_SOURCES_CACHE':'http://cache/get?#algorithm#=#hash#'})
         k.start()
@@ -341,7 +412,7 @@ class TestConfig(unittest.TestCase):
     @mock.patch('dogen.generator.Generator._fetch_file')
     def test_handling_sources_with_cache_url_and_target_filename(self, mock_fetch_file, mock_check_sum):
         with self.descriptor as f:
-            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5sum: e9013fc202c87be48e3b302df10efc4b\n    target: target.zip".encode())
+            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5: e9013fc202c87be48e3b302df10efc4b\n    target: target.zip".encode())
 
         k = mock.patch.dict(os.environ, {'DOGEN_SOURCES_CACHE':'http://cache/get?#algorithm#=#hash#'})
         k.start()
@@ -351,3 +422,18 @@ class TestConfig(unittest.TestCase):
         k.stop()
 
         mock_fetch_file.assert_called_with('http://cache/get?md5=e9013fc202c87be48e3b302df10efc4b', 'target/target.zip')
+
+    @mock.patch('dogen.generator.Generator.check_sum')
+    @mock.patch('dogen.generator.Generator._fetch_file')
+    def test_handling_sources_with_cache_url_with_filename_to_replace(self, mock_fetch_file, mock_check_sum):
+        with self.descriptor as f:
+            f.write("sources:\n  - url: http://somehost.com/file.zip\n    md5: e9013fc202c87be48e3b302df10efc4b\n    target: target.zip".encode())
+
+        k = mock.patch.dict(os.environ, {'DOGEN_SOURCES_CACHE':'http://cache/#filename#'})
+        k.start()
+        generator = Generator(self.log, self.args)
+        generator.configure()
+        generator.handle_sources()
+        k.stop()
+
+        mock_fetch_file.assert_called_with('http://cache/file.zip', 'target/target.zip')

pip install -e .
parse_log_pytest
requirements.txt
pytest pytest-cov mock pykwalify
apt-get update apt-get install -y gcc
3.9
requirements.txt
pytest --no-header -rA --tb=line --color=no -p no:cacheprovider -W ignore::DeprecationWarning
certifi==2025.1.31
charset-normalizer==3.4.1
coverage==7.8.0
docopt==0.6.2
-e git+https://github.com/jboss-dockerfiles/dogen.git@bb52f327cd889a0af7b046762a3856a9e6aecca9#egg=dogen
exceptiongroup==1.2.2
idna==3.10
iniconfig==2.1.0
Jinja2==3.1.6
MarkupSafe==3.0.2
mock==5.2.0
packaging==24.2
pluggy==1.5.0
pykwalify==1.8.0
pytest==8.3.5
pytest-cov==6.0.0
python-dateutil==2.9.0.post0
PyYAML==6.0.2
requests==2.32.3
ruamel.yaml==0.18.10
ruamel.yaml.clib==0.2.12
six==1.17.0
tomli==2.2.1
urllib3==2.3.0

name: dogen
channels:
  - defaults
  - https://repo.anaconda.com/pkgs/main
  - https://repo.anaconda.com/pkgs/r
  - conda-forge
dependencies:
  - _libgcc_mutex=0.1=main
  - _openmp_mutex=5.1=1_gnu
  - ca-certificates=2025.2.25=h06a4308_0
  - ld_impl_linux-64=2.40=h12ee557_0
  - libffi=3.4.4=h6a678d5_1
  - libgcc-ng=11.2.0=h1234567_1
  - libgomp=11.2.0=h1234567_1
  - libstdcxx-ng=11.2.0=h1234567_1
  - ncurses=6.4=h6a678d5_0
  - openssl=3.0.16=h5eee18b_0
  - pip=25.0=py39h06a4308_0
  - python=3.9.21=he870216_1
  - readline=8.2=h5eee18b_0
  - setuptools=75.8.0=py39h06a4308_0
  - sqlite=3.45.3=h5eee18b_0
  - tk=8.6.14=h39e8969_0
  - tzdata=2025a=h04d1e81_0
  - wheel=0.45.1=py39h06a4308_0
  - xz=5.6.4=h5eee18b_1
  - zlib=1.2.13=h5eee18b_1
  - pip:
      - certifi==2025.1.31
      - charset-normalizer==3.4.1
      - coverage==7.8.0
      - docopt==0.6.2
      - exceptiongroup==1.2.2
      - idna==3.10
      - iniconfig==2.1.0
      - jinja2==3.1.6
      - markupsafe==3.0.2
      - mock==5.2.0
      - packaging==24.2
      - pluggy==1.5.0
      - pykwalify==1.8.0
      - pytest==8.3.5
      - pytest-cov==6.0.0
      - python-dateutil==2.9.0.post0
      - pyyaml==6.0.2
      - requests==2.32.3
      - ruamel-yaml==0.18.10
      - ruamel-yaml-clib==0.2.12
      - six==1.17.0
      - tomli==2.2.1
      - urllib3==2.3.0
prefix: /opt/conda/envs/dogen

tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources_when_local_file_exists_and_is_broken tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources_when_local_file_exists_and_is_correct tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources_with_cache_url tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources_with_cache_url_and_target_filename tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources_with_cache_url_with_filename_to_replace tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources_with_deprecated_md5sum tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources_with_multiple_hashes tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources_with_multiple_hashes_and_cache_url tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources_with_sha1 tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources_with_sha256 tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources_with_target_filename tests/test_unit_generate_configuration.py::TestConfig::test_handling_sources_without_specified_md5sum
tests/test_unit_generate_configuration.py::TestConfig::test_custom_additional_scripts_in_cli_should_override_in_descriptor tests/test_unit_generate_configuration.py::TestConfig::test_custom_additional_scripts_in_descriptor tests/test_unit_generate_configuration.py::TestConfig::test_custom_script_exec tests/test_unit_generate_configuration.py::TestConfig::test_custom_script_exec_not_env tests/test_unit_generate_configuration.py::TestConfig::test_custom_script_user_not_default tests/test_unit_generate_configuration.py::TestConfig::test_custom_script_user_not_env tests/test_unit_generate_configuration.py::TestConfig::test_custom_scripts_dir_in_cli_should_override_in_descriptor tests/test_unit_generate_configuration.py::TestConfig::test_custom_scripts_dir_in_descriptor tests/test_unit_generate_configuration.py::TestConfig::test_custom_template_in_cli_should_override_in_descriptor tests/test_unit_generate_configuration.py::TestConfig::test_custom_template_in_descriptor tests/test_unit_generate_configuration.py::TestConfig::test_default_script_exec tests/test_unit_generate_configuration.py::TestConfig::test_default_script_user tests/test_unit_generate_configuration.py::TestConfig::test_default_values tests/test_unit_generate_configuration.py::TestConfig::test_do_not_skip_ssl_verification_in_cli_false_should_override_descriptor tests/test_unit_generate_configuration.py::TestConfig::test_do_not_skip_ssl_verification_in_descriptor tests/test_unit_generate_configuration.py::TestConfig::test_env_provided_script_user tests/test_unit_generate_configuration.py::TestConfig::test_env_supplied_script_exec tests/test_unit_generate_configuration.py::TestConfig::test_fail_if_version_mismatch tests/test_unit_generate_configuration.py::TestConfig::test_no_scripts_defined tests/test_unit_generate_configuration.py::TestConfig::test_scripts_dir_found_by_convention tests/test_unit_generate_configuration.py::TestConfig::test_skip_ssl_verification_in_descriptor
docs/index.adoc docs/environment_variables.adoc dogen/generator.py dogen/schema/kwalify_schema.yaml
docs/index.adoc docs/environment_variables.adoc dogen/generator.py dogen/schema/kwalify_schema.yaml