Should fail if key password is wrong or in general if created signature is empty

[jarlah]

Im taking a stab on this

[jarlah]

and why call out to openssl if there is libraries for this? note: haven't checked

[jarlah]

yup- ex_openssl is deprecated