title: How to verify signature on self signed jar?
body: <p>I've signed my jar with a key that I generated using keytool. At runtime, how do I verify that the jar hasn't been modified? </p>
  
  <p>The goal is to use the certificate information and verify that each class in the jar has not been modified since the jar was built. This is a runtime check so the jar containing the code could be anywhere on the user's file system.</p>