Comment 6 for bug 737311

Problem is that verify calls hash_headers(), which hashes repeat headers from last to first, whereas sign does its own header hashing, which hashes repeat headers from first to last.