openssl pkeyutl -sign -in $hash_file -inkey $priv_file -pkeyopt rsa_padding_mode:pss -pkeyopt rsa_pss_saltlen:-1 -pkeyopt digest:sha256 -out $sig_file
openssl pkeyutl -verify -pubin -inkey $pub_file -sigfile $sig_file -in $hash_file -pkeyopt rsa_padding_mode:pss -pkeyopt rsa_pss_saltlen:-1 -pkeyopt digest:sha256