Implemented the 'second chance' for verification of the signature file

Done one TODO: JAR signature file specification allows for the signature over whole manifest to mismatch. (Presumably because new files could be added to JAR, which changed the manifest.) Verification still should succeed if the signature over "manifest main attributes" and the signature over every manifest entry matches. This second check is implemented.