[Galaxy S II Original Android Development] Entropy512:
He changed the initramfs, not the kernel binary itself. Kernel images consist of a kernel binary with an initramfs appended to it.

When there are perfectly safe alternatives, it makes no sense to keep distributing a dangerous one.

Results of:

jarsigner -certs -verbose -verify recovery-clockwork-4.0.1.5-galaxys2.zip

are

1885 Thu Feb 28 18:33:46 EST 2008 META-INF/MANIFEST.MF
1938 Thu Feb 28 18:33:46 EST 2008 META-INF/CERT.SF
1714 Thu Feb 28 18:33:46 EST 2008 META-INF/CERT.RSA
sm 224260 Thu Feb 28 18:33:46 EST 2008 META-INF/com/google/android/update-binary

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 8767 Thu Feb 28 18:33:46 EST 2008 META-INF/com/google/android/updater-script

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 280 Thu Feb 28 18:33:46 EST 2008 etc/recovery.fstab

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 19889 Thu Feb 28 18:33:46 EST 2008 res/images/icon_clockwork.png

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 10398 Thu Feb 28 18:33:46 EST 2008 res/images/icon_error.png

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 11493 Thu Feb 28 18:33:46 EST 2008 res/images/icon_installing.png

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 1919 Thu Feb 28 18:33:46 EST 2008 res/images/indeterminate1.png

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 1912 Thu Feb 28 18:33:46 EST 2008 res/images/indeterminate2.png

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 1917 Thu Feb 28 18:33:46 EST 2008 res/images/indeterminate3.png

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 1912 Thu Feb 28 18:33:46 EST 2008 res/images/indeterminate4.png

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 1902 Thu Feb 28 18:33:46 EST 2008 res/images/indeterminate5.png

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 1914 Thu Feb 28 18:33:46 EST 2008 res/images/indeterminate6.png

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 361 Thu Feb 28 18:33:46 EST 2008 res/images/progress_empty.png

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 286 Thu Feb 28 18:33:46 EST 2008 res/images/progress_fill.png

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 1387 Thu Feb 28 18:33:46 EST 2008 res/keys

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 118004 Thu Feb 28 18:33:46 EST 2008 sbin/adbd

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 428664 Thu Feb 28 18:33:46 EST 2008 sbin/e2fsck

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 14795 Thu Feb 28 18:33:46 EST 2008 sbin/fix_permissions

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 409 Thu Feb 28 18:33:46 EST 2008 sbin/killrecovery.sh

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 53 Thu Feb 28 18:33:46 EST 2008 sbin/nandroid-md5.sh

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 346680 Thu Feb 28 18:33:46 EST 2008 sbin/parted

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 776572 Thu Feb 28 18:33:46 EST 2008 sbin/recovery

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 16529 Thu Feb 28 18:33:46 EST 2008 sbin/sdparted

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 303212 Thu Feb 28 18:33:46 EST 2008 sbin/tune2fs

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

s = signature was verified
m = entry is listed in manifest
k = at least one certificate was found in keystore
i = at least one certificate was found in identity scope

jar verified.

And the results of:

jarsigner -certs -verbose -verify CWM-SuperSU-v0.94.zip

are:

393 Fri Feb 29 03:33:46 EST 2008 META-INF/MANIFEST.MF
446 Fri Feb 29 03:33:46 EST 2008 META-INF/CERT.SF
1714 Fri Feb 29 03:33:46 EST 2008 META-INF/CERT.RSA
sm 190552 Fri Feb 29 03:33:46 EST 2008 META-INF/com/google/android/update-binary

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 1819 Fri Feb 29 03:33:46 EST 2008 META-INF/com/google/android/updater-script

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 969701 Fri Feb 29 03:33:46 EST 2008 system/app/Superuser.apk

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

sm 91980 Fri Feb 29 03:33:46 EST 2008 system/xbin/su

X.509, EMAILADDRESS=android@android.com, CN=Android, OU=Android, O=Android, L=Mountain View, ST=California, C=US
[certificate is valid from 2/28/08 8:33 PM to 7/16/35 9:33 PM]

s = signature was verified
m = entry is listed in manifest
k = at least one certificate was found in keystore
i = at least one certificate was found in identity scope

jar verified.

Same certificate, both packages were signed by testkeys. If SuperSU fails to flash in stock recovery, it is not due to a signature issue.

I'll poke at this when I have more time on my I777, later this week.