using openssl_*() native functions to sign and verify