Multiple package formats overwrite each other's checksums
It is easy to tell cmake to generate packages in all widely used formats at once:
set(CPACK_GENERATOR "TGZ;TBZ2;DEB;RPM")
It is also easy to tell cmake to provide a sha256 hash for the generated packages:
set(CPACK_PACKAGE_CHECKSUM "SA256")
Unfortunately the checksum for all archive formats have the same name (and therefore will overwrite each other). The same is true for both package formats gequested by the 1st of the two set commands.