The user may opt to verify the file they download using a signature for that file. In order to do so, there are two steps the user must execute.

First, the user will need to convert the signature to binary form followed by applying the OpenSSL verification process. The user can obtain OpenSSL directly from https://www.openssl.org/.  

Use the following commands to execute these 2 steps

openssl base64 -d -in <signature> -out /tmp/sign.sha256
openssl dgst -sha256 -verify <pub-key> -signature /tmp/sign.sha256 <file>

For Example:
openssl base64 -d -in AndroidWebRTCConnectSDKSignature.sha256 -out /tmp/DecodedAndroidWebRTCConnectSDKSignature.sha256
openssl dgst -sha256 -verify pubkey.pem -signature /tmp/DecodedAndroidWebRTCConnectSDKSignature.sha256 Android_WebRTCConnectSDK.zip

