check_sha1_signature: check return value from read_istream