diff --git a/maven/multisign.sh b/maven/multisign.sh
index 02403628b..3156d63c3 100755
--- a/maven/multisign.sh
+++ b/maven/multisign.sh
@@ -22,10 +22,29 @@ echo "enter your GPG passphrase"
 read passphrase
 stty echo
 
+# Do we have md5sum and sha1sum?
+# (We can use openssl if not, but the files it produces aren't as nice)
+which md5sum > /dev/null
+LACKING_MD5SUM=$?
+which sha1sum > /dev/null
+LACKING_SHA1SUM=$?
+
 for i in *; do
+    echo ""
     echo Signing $i
     echo $passphrase | gpg --passphrase-fd 0 --output $i.asc --detach-sig --armor $i
     gpg --verify $i.asc $i
     echo Hashing $i
-    openssl md5 < $i > $i.md5
+
+    if [ "$LACKING_MD5SUM" = "1" ]; then
+       openssl md5 < $i > $i.md5
+    else
+       md5sum $i > $i.md5
+    fi
+
+    if [ "$LACKING_SHA1SUM" = "1" ]; then
+       openssl sha1 < $i > $i.sha1
+    else
+       sha1sum $i > $i.sha1
+    fi
 done
diff --git a/src/documentation/content/xdocs/status.xml b/src/documentation/content/xdocs/status.xml
index 79f461fd7..1b023b21d 100644
--- a/src/documentation/content/xdocs/status.xml
+++ b/src/documentation/content/xdocs/status.xml
@@ -33,10 +33,9 @@
     </developers>
 
     <changes>
-<!--
         <release version="3.7-beta4" date="2010-??-??">
+           <action dev="poi-developers" type="add">Generate SHA1 hashes of distribution files, alongside existing MD5 ones</action>
         </release>
--->
         <release version="3.7-beta3" date="2010-09-24">
            <action dev="poi-developers" type="fix">48325 - If a HSSF header or footer lacks left/right/centre information, assume it is a centre one</action>
            <action dev="poi-developers" type="fix">49966 - Correctly remove calcChain entries for XSSF cells that stop holding formulas</action>