diff --git a/scripts/pkg.sh b/scripts/pkg.sh
index 88c042f1..e3a2cffd 100644
--- a/scripts/pkg.sh
+++ b/scripts/pkg.sh
@@ -631,7 +631,9 @@ upload_pkg()
 		# login =
 		incoming = /var/lib/packager-server/packages/jw-foss/$distro_subdir/incoming/
 		method = rsync
-		hash = sha
+		# the Files: section of the .changes only carries MD5
+		# checksums, so dput's hash option must stay at md5
+		hash = md5
 		allow_unsigned_uploads = yes
 		distributions = debian-8
 		allowed_distributions = `get_os`