ERROR: invalid sha signature