title: invalid SHA1 signature file digest
body: <p>I have been trying to verify the Jar signing:</p>
  
  <pre><code>    jarsigner -verify -verbose -certs example.jar
  </code></pre>
  
  <p>I got the following problem:</p>
  
  <pre><code>jarsigner: java.lang.SecurityException: invalid SHA1 signature file digest for o
  rg/apache/log4j/net/DefaultEvaluator.class
  </code></pre>
  
  <p>I got some suggestions about using <code>-digestalg SHA-1</code> but I do not know where I should put this statement!</p>
  
  <p>I hope you can help me to fix the problem.</p>