class Gem::Security::Policy

def verify_signatures(spec, digests, signatures)
  chain = spec.cert_chain.map do |cert_pem|
    OpenSSL::X509::Certificate.new cert_pem
  end
  verify chain, nil, digests, signatures, spec.full_name
  true
end