RSA_verify() expects a binary digest of the data, not hex

This completes the signing support.
Revert "The external signing command uses -sha256"

This change was made to the wrong function, which was later
done correctly in c702aba4

This reverts commit 549f2dfe6ee271f658424703ae9e9dd50efdebb0.