cf3a6f52bc
Package signing tool verifies signed data using certificate instead of public key. It also verifies certificate, warns if it's self signed, fails if it's invalid.