add tarball signature check (cherry picked from commit e45a2ba572)
e45a2ba572
This reverts commit b3e31a9819.
b3e31a9819