fix gpg verification

I have some problems with gpg --verify on changes-file generated by jdeb. I had rewritten signing process a bit. Now gpg --verify passes without problems.