Should reject signatures that we can't properly verify and couldn't generate (as pointed out by Ernst G Giessmann)
Should reject signatures that we can't properly verify
and couldn't generate
(as pointed out by Ernst G Giessmann)

openssl/openssl,openssl/openssl,openssl/openssl,openssl/openssl,openssl/openssl,openssl/openssl