class Gem::Security::Policy

def verify_signatures spec, digests, signatures
  chain = spec.cert_chain.map do |cert_pem|
    OpenSSL::X509::Certificate.new cert_pem
  end
  verify chain, nil, digests, signatures
  true
end