the boost's download page offers the SHA256 hash, so it'd be easier to verify the hash this way. Signed-off-by: Kefu Chai <kchai@redhat.com>