Opens the jarFile, verifies it and then gets signing certificate as well as the index stream for further processing. The caller does not need to close the stream.