chiark / gitweb /
use jarsigner to verify the APK signature is valid